00010000deffde0068a94a86be908a9118565bd34bcb7f599761137206c77938761ada0005b0c0ebc2b652fe6d4387e27ce03ff34d1884a5e186474ede7bad1e932dc235f40172d10992063776e8e3d174e85fd1207f2fcfdcfe9d3b8793076604c019"], 0x92)
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0)
ioctl$EVIOCGSND(r4, 0x40084503, &(0x7f0000000100)=""/235)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

[  559.983033][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:25 executing program 2:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b01100000ff7f", 0xa}, {&(0x7f0000010100)="0200000007000000080000001f0e000002", 0x11, 0x200}], 0x0, &(0x7f00000023c0)=ANY=[])
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)

02:55:25 executing program 2:
syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5b45b7", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x0, [0x0, 0xff], [@padn]}]}}}}}, 0x0)

02:55:25 executing program 2:
syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000300))

02:55:25 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe}, 0x4000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:55:25 executing program 5:
syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x2, 0x0)

02:55:25 executing program 5:
r0 = syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@dyn='dyn'}]})
openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18)

02:55:26 executing program 0:
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
add_key(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="0398d0b731f54c9f6174a9500c01ac1c4b9c551bfab5ad9147df85bebd73c512798432fda8470cf9fbc62c13e8a0cad53046ef02f80886d7240fc86c417b300d355287b85cb9a3c87989d6c0edf47a23e5a5abd6972f2f97ee980c2e678099d087e6dcf7f0d7445f48", 0x69, 0xfffffffffffffffb)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, 0x0, r2}, &(0x7f0000000140)=""/183, 0xb7, &(0x7f0000001580)={&(0x7f0000000240)={'sha384-generic\x00'}})
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde0068a94a86be908a9118565bd34bcb7f599761137206c77938761ada0005b0c0ebc2b652fe6d4387e27ce03ff34d1884a5e186474ede7bad1e932dc235f40172d10992063776e8e3d174e85fd1207f2fcfdcfe9d3b8793076604c019"], 0x92)
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0)
ioctl$EVIOCGSND(r4, 0x40084503, &(0x7f0000000100)=""/235)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

02:55:26 executing program 5:
r0 = syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@dyn='dyn'}]})
openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18)

02:55:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1c2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0)

02:55:26 executing program 1:
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
add_key(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="0398d0b731f54c9f6174a9500c01ac1c4b9c551bfab5ad9147df85bebd73c512798432fda8470cf9fbc62c13e8a0cad53046ef02f80886d7240fc86c417b300d355287b85cb9a3c87989d6c0edf47a23e5a5abd6972f2f97ee980c2e678099d087e6dcf7f0d7445f48", 0x69, 0xfffffffffffffffb)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, 0x0, r2}, &(0x7f0000000140)=""/183, 0xb7, &(0x7f0000001580)={&(0x7f0000000240)={'sha384-generic\x00'}})
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde0068a94a86be908a9118565bd34bcb7f599761137206c77938761ada0005b0c0ebc2b652fe6d4387e27ce03ff34d1884a5e186474ede7bad1e932dc235f40172d10992063776e8e3d174e85fd1207f2fcfdcfe9d3b8793076604c019"], 0x92)
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0)
ioctl$EVIOCGSND(r4, 0x40084503, &(0x7f0000000100)=""/235)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

02:55:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a010200000000000000000200fffe0900010073797a30000000001c0004ff7f0000000000000008000140000000000800024040ff94a60900030073797a320000000034000000000a03000000000000000000020000000c00044000000000000000020900010073797a300000e900080002400000000114000000020a010100000000000000000000000014000000110001"], 0xd8}}, 0x0)

02:55:26 executing program 3:
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
add_key(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="0398d0b731f54c9f6174a9500c01ac1c4b9c551bfab5ad9147df85bebd73c512798432fda8470cf9fbc62c13e8a0cad53046ef02f80886d7240fc86c417b300d355287b85cb9a3c87989d6c0edf47a23e5a5abd6972f2f97ee980c2e678099d087e6dcf7f0d7445f48", 0x69, 0xfffffffffffffffb)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, 0x0, r2}, &(0x7f0000000140)=""/183, 0xb7, &(0x7f0000001580)={&(0x7f0000000240)={'sha384-generic\x00'}})
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde0068a94a86be908a9118565bd34bcb7f599761137206c77938761ada0005b0c0ebc2b652fe6d4387e27ce03ff34d1884a5e186474ede7bad1e932dc235f40172d10992063776e8e3d174e85fd1207f2fcfdcfe9d3b8793076604c019"], 0x92)
r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0)
ioctl$EVIOCGSND(r4, 0x40084503, &(0x7f0000000100)=""/235)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)

[  560.944343][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:26 executing program 5:
r0 = syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@dyn='dyn'}]})
openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18)

[  561.024748][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1c2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0)

02:55:26 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0)
r3 = fanotify_init(0x0, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r3, 0x1, 0x20, r4, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write$P9_RREADLINK(r5, &(0x7f0000000380)=ANY=[], 0x44)
sendfile(r5, r5, &(0x7f0000000240), 0x7fff)

[  561.502869][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:26 executing program 5:
r0 = syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@dyn='dyn'}]})
openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18)

02:55:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1c2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0)

02:55:27 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1c2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0)

[  561.855070][T20680] sg_write: data in/out 262577/104 bytes for SCSI command 0x13-- guessing data in;
[  561.855070][T20680]    program syz-executor.0 not setting count and/or reply_len properly
[  562.063361][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.218145][   T34] audit: type=1804 audit(1605581727.421:83): pid=20710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16380 res=1 errno=0
02:55:27 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x82, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

02:55:27 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x18}, 0x0, 0x0)

02:55:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0)

[  562.766991][T20721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  562.796204][T20722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.814808][T20721] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  562.853026][T20728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:55:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x8c}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:55:28 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

02:55:28 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

02:55:28 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f00000000c0), 0xfffffcfd)
fcntl$setpipe(r0, 0x407, 0x0)

[  562.883139][T20728] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
02:55:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0)

02:55:28 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

[  563.102859][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.121607][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:55:28 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

02:55:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x8c}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  563.233033][T20758] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
02:55:28 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x18}, 0x0, 0x0)

02:55:28 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000080"], 0xcc}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x14, 0x1, 0x3, 0x201}, 0x14}}, 0x0)

02:55:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0)

02:55:28 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

[  563.442472][T20769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:55:28 executing program 3:
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  563.504857][T20775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:55:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x8c}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:55:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

[  563.593441][T20778] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
02:55:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0)

02:55:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0)

02:55:29 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x18}, 0x0, 0x0)

02:55:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

[  563.972637][T20803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  563.982645][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x8c}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:55:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

[  564.090901][T20813] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  564.101115][T20818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.143821][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:29 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:29 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x18}, 0x0, 0x0)

02:55:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:29 executing program 0:
clone3(&(0x7f00000001c0)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

02:55:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "accf205301000102", "f3f4c9f2262c2e1532b2383c26b0c1e668113c384dd48c9904245bebf99cd757", "0a178d79", "28e694ad17ad6ba9"}, 0x38)
sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

02:55:29 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:29 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)

02:55:29 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:29 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3}, 0x9c)

[  564.723181][T20843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:55:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x3f000000)

02:55:30 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@authinfo={0x18}], 0x18}, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)

02:55:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x20000000000000a, 0x2, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10)

02:55:30 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001200)='Q', 0x1}, 0x68)

02:55:30 executing program 1:
r0 = eventfd2(0x0, 0x0)
io_setup(0x101, &(0x7f00000000c0)=<r1=>0x0)
r2 = eventfd(0x0)
r3 = eventfd(0x0)
io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffe0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}])

02:55:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

02:55:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

02:55:30 executing program 0:
syz_mount_image$qnx6(&(0x7f0000004c80)='qnx6\x00', &(0x7f0000004cc0)='./file0\x00', 0x0, 0x0, &(0x7f0000004d00), 0x8000, &(0x7f0000004d40))

[  565.182751][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:30 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001200)='Q', 0x1}, 0x68)

02:55:30 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[  565.353806][T20875] IPv6: NLM_F_REPLACE set, but no existing node found!
02:55:30 executing program 1:
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xea, 0xb7, 0x40, 0x20b7, 0x1540, 0x3233, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000001e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

02:55:30 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}})

02:55:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

02:55:30 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001200)='Q', 0x1}, 0x68)

02:55:30 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[  565.547307][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.568311][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.632435][  T340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.642845][T20893] IPv6: NLM_F_REPLACE set, but no existing node found!
[  565.661546][  T340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:55:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

02:55:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

02:55:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

02:55:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001200)='Q', 0x1}, 0x68)

02:55:31 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[  565.882307][   T55] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  565.983590][T20907] IPv6: NLM_F_REPLACE set, but no existing node found!
[  565.997482][   T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.013672][   T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:55:31 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, [], 0xff8d})

02:55:31 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035000c00060000001900150005000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

[  566.098679][  T340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.157038][  T340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.232979][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.250449][T20917] IPv6: NLM_F_REPLACE set, but no existing node found!
[  566.252871][   T55] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=32.33
[  566.296567][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.359087][   T55] usb 2-1: config 0 descriptor??
[  567.022308][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.263287][T12143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.502155][   T55] usb 2-1: unexpected transceiver, part 0x00 version 0x00
[  567.509467][   T55] usb 2-1: Firmware version (0.0) predates our first public release.
[  567.526912][   T55] usb 2-1: Please update to version 0.2 or newer
[  567.537100][   T55] usb 2-1: atusb_probe: initialization failed, error = -19
[  567.705228][   T55] usb 2-1: USB disconnect, device number 14
[  568.302237][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.481836][ T9809] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  568.842196][ T9809] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=32.33
[  568.851261][ T9809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.866883][ T9809] usb 2-1: config 0 descriptor??
02:55:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setregid(0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="10", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="000000006a0ea0a56a6ef3b334d7050d8047b233ac", @ANYRES16, @ANYRES32, @ANYRES64], 0x64, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

02:55:34 executing program 2:
timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x10001)
read(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}], 0x1, 0x0, 0x0)
tkill(r1, 0x800000015)

02:55:34 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

02:55:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

02:55:34 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, [], 0xff8d})

02:55:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

[  569.037406][ T9809] usb 2-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71
[  569.047972][ T9809] usb 2-1: Firmware version (0.0) predates our first public release.
[  569.110897][ T9809] usb 2-1: Please update to version 0.2 or newer
02:55:34 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, [], 0xff8d})

[  569.156103][ T9809] usb 2-1: atusb_probe: initialization failed, error = -71
[  569.194357][ T9809] atusb: probe of 2-1:0.0 failed with error -71
[  569.224651][ T9809] usb 2-1: USB disconnect, device number 15
02:55:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x44}}, 0x0)

[  569.342062][T12143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.386814][  T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.407129][  T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.414152][   T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.437592][   T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:55:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setregid(0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="10", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="000000006a0ea0a56a6ef3b334d7050d8047b233ac", @ANYRES16, @ANYRES32, @ANYRES64], 0x64, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

02:55:34 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, [], 0xff8d})

[  569.564657][T20968] batman_adv: Cannot find parent device
02:55:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

02:55:34 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getpeername$packet(r0, 0x0, 0x0)

02:55:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)

[  569.906202][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.931318][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.938998][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.952938][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.070225][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.383338][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.101891][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.431869][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000000700008000800000000000800090000000000080001000a000300080005"], 0x58}}, 0x0)

02:55:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setregid(0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="10", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="000000006a0ea0a56a6ef3b334d7050d8047b233ac", @ANYRES16, @ANYRES32, @ANYRES64], 0x64, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

02:55:37 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r0, &(0x7f0000000000)=@xdp, 0x80)

02:55:37 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x49, &(0x7f0000000380)="5cf249b974057c79b1c2ed44c921bf3c0f339e57f4f21016a5b60a00088024c70e47896c758bbe4643ae0ffccb5c62659190ad0000c0ee627ac672a25b5256d74b74bc8d4500000000"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

02:55:37 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f0000000200))

02:55:37 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "8c09223d513495a417dcff9ba4dfd5fac7bbf8468fcd26f84a81e8464ace7714", "261e3b71a6f58499dfd3554c1998731986ed6dda8ab028e1569beaf7c4f97278", "357bf0e1c260358221905446d7fb8f960742d27725ecf16989fae300", "6ea73dc88cfd32e50b3e37f3dc32036c63c993344bdd2ea6f727ea647235e6c3", "1cdc1bd30ba8c7674c6a877be41870ee8d5348df12e8c2d8e8375b2a0fa2bc85", "7617910bb35ee46b4c84c716"}})

02:55:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @NHA_FDB={0x4}, @NHA_GROUP={0x4}]}, 0x2c}}, 0x0)

02:55:37 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4018, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4418, 0x4)

02:55:37 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
mremap(&(0x7f00008a8000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000000000/0x800000)=nil)
pkey_mprotect(&(0x7f00007e5000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f00007b4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

[  572.245429][T21005] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:55:37 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
mremap(&(0x7f00008a8000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000000000/0x800000)=nil)
pkey_mprotect(&(0x7f00007e5000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f00007b4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

[  572.305485][T21010] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:55:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setregid(0x0, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="10", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="000000006a0ea0a56a6ef3b334d7050d8047b233ac", @ANYRES16, @ANYRES32, @ANYRES64], 0x64, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

02:55:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @NHA_FDB={0x4}, @NHA_GROUP={0x4}]}, 0x2c}}, 0x0)

02:55:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000000700008000800000000000800090000000000080001000a000300080005"], 0x58}}, 0x0)

02:55:37 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4018, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4418, 0x4)

[  572.462469][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:37 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
mremap(&(0x7f00008a8000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000000000/0x800000)=nil)
pkey_mprotect(&(0x7f00007e5000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f00007b4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

[  572.601112][T21026] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  573.107173][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.511693][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.541612][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:40 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @NHA_FDB={0x4}, @NHA_GROUP={0x4}]}, 0x2c}}, 0x0)

02:55:40 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4018, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4418, 0x4)

02:55:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xffd4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x2, 0x0, &(0x7f0000001500))

02:55:40 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
mremap(&(0x7f00008a8000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000000000/0x800000)=nil)
pkey_mprotect(&(0x7f00007e5000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f00007b4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

02:55:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000000700008000800000000000800090000000000080001000a000300080005"], 0x58}}, 0x0)

[  575.150102][T21038] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
02:55:40 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4018, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4418, 0x4)

02:55:40 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

02:55:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @NHA_FDB={0x4}, @NHA_GROUP={0x4}]}, 0x2c}}, 0x0)

02:55:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000000700008000800000000000800090000000000080001000a000300080005"], 0x58}}, 0x0)

02:55:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xffd4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x2, 0x0, &(0x7f0000001500))

02:55:40 executing program 4:
r0 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x5, 0x8, 0x3])

[  575.435895][T21054] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  575.581972][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:40 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:40 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="d1011dd555ba49bad326b322c34610a31b", 0x11)

02:55:40 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

02:55:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xffd4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x2, 0x0, &(0x7f0000001500))

02:55:40 executing program 4:
add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

02:55:41 executing program 3:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  575.929642][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
02:55:41 executing program 4:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  576.023351][T21073] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  576.147994][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.171493][T21073] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  576.180314][T21073] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  576.188647][T21073] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  576.196956][T21073] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
02:55:41 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

02:55:41 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xffd4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x2, 0x0, &(0x7f0000001500))

02:55:41 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  576.357848][T21073] device vxlan0 entered promiscuous mode
02:55:41 executing program 4:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:41 executing program 3:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:41 executing program 1:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  576.621544][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:41 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:41 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

02:55:42 executing program 4:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:42 executing program 1:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  577.026313][T21102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
02:55:42 executing program 3:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  577.091946][T21102] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
02:55:42 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:42 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

02:55:42 executing program 1:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:42 executing program 4:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:42 executing program 3:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  577.670147][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:43 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:43 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

02:55:43 executing program 1:
syz_mount_image$sysv(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000100)={[{@index_on='index=on'}]})

02:55:43 executing program 4:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:43 executing program 3:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  578.002049][T21127] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  578.022657][T21127] overlayfs: missing 'lowerdir'
02:55:43 executing program 1:
syz_mount_image$sysv(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000100)={[{@index_on='index=on'}]})

[  578.146180][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  578.209262][T21130] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
02:55:43 executing program 5:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  578.437999][T21136] overlayfs: option "index=on" is useless in a non-upper mount, ignore
02:55:43 executing program 3:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

[  578.485392][T21136] overlayfs: missing 'lowerdir'
02:55:43 executing program 0:
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

02:55:43 executing program 4:
perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc208, 0x0, 0x800, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
socket$kcm(0x29, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={r1})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x2, 0xffffffe1, 0x5, 0x24, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001600))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001300)=""/121, 0x88, 0x79, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=""/104, 0x68, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="0e20b07fa7f8ae2457ad486eacb7c360918464e502efaa9f422992c392506ec096280f230432f8b3090d1bf5c709e4f0d08864420800000000000000dc5eb8fced5a8eba49fe399844b40e8a05cea1533df9cfb600000000663dc8f5d65b9c78efb37a7cc44a00d973f6cbf7cc2fbac426b44540f71593b14f2a64000000000000000000", @ANYRES32, @ANYRESOCT], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0xff5, &(0x7f0000001ac0)=""/4085, 0x41000, 0x5, [], 0x0, 0x13, r3, 0x8, &(0x7f0000000400)={0xfffffffc, 0x6}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0x10, 0x2, 0x3f}, 0x10, r4}, 0x78)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400c00)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

02:55:43 executing program 1:
syz_mount_image$sysv(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000100)={[{@index_on='index=on'}]})

[  578.713382][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:43 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000))

02:55:44 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

02:55:44 executing program 4:
r0 = add_key$keyring(&(0x7f0000001d00)='keyring\x00', &(0x7f0000001d40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x17, r0, 0x0)

[  578.875404][T21148] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  578.910899][T21148] overlayfs: missing 'lowerdir'
02:55:44 executing program 3:
prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff7)
futex(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0)

02:55:44 executing program 1:
syz_mount_image$sysv(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000100)={[{@index_on='index=on'}]})

02:55:44 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000))

[  579.077410][T21158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
02:55:44 executing program 4:
r0 = add_key$keyring(&(0x7f0000001d00)='keyring\x00', &(0x7f0000001d40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x17, r0, 0x0)

[  579.182451][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.191043][T21158] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
02:55:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r1, 0x30b, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0)

[  579.273583][T21163] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  579.313392][T21163] overlayfs: missing 'lowerdir'
02:55:44 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000))

02:55:44 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

02:55:44 executing program 4:
r0 = add_key$keyring(&(0x7f0000001d00)='keyring\x00', &(0x7f0000001d40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x17, r0, 0x0)

02:55:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r1, 0x30b, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0)

02:55:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x7ffff000}], 0x1)

[  579.745845][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:45 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000))

02:55:45 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73c683bb7d5ad897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde4a594290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868c6da7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a81faae79b6af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x13, 0x0, 0x0)

02:55:45 executing program 4:
r0 = add_key$keyring(&(0x7f0000001d00)='keyring\x00', &(0x7f0000001d40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0x17, r0, 0x0)

02:55:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r1, 0x30b, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0)

02:55:45 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x7ffff000}], 0x1)

02:55:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2205, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)

02:55:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r1, 0x30b, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0)

02:55:45 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76fafc", 0x0, 0x29, 0x0, @private0, @mcast2}}}}, 0x0)

[  580.015141][T21200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
02:55:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  580.129014][T21207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
02:55:45 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r1)

02:55:45 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
io_setup(0x100, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000002800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

02:55:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20)

02:55:45 executing program 2:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="900000001d001f4d154a81739327abff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323", 0x42, 0x0, 0x0, 0x0)
clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000180)={{0x0, @rand_addr, 0x4e23, 0x0, 'none\x00'}}, 0x44)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb)

02:55:45 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280))

02:55:45 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x6000000000010, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492778, 0x0)

[  580.385843][T21225] Option '                                                                       ' to dns_resolver key: bad/missing value
[  580.408925][T21226] Option '                                                                       ' to dns_resolver key: bad/missing value
02:55:45 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x4000)

[  580.701055][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x7ffff000}], 0x1)

02:55:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x44}}, 0x0)

02:55:46 executing program 2:
get_mempolicy(0x0, 0xfffffffffffffffd, 0x4e6, &(0x7f0000ff6000/0xa000)=nil, 0x2)

02:55:46 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  580.782235][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:46 executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x43, 0x2e, 0xee, 0x40, 0x1199, 0x6821, 0x6f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x1c, 0xb9}}]}}]}}, 0x0)

02:55:46 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x1, {0x7}}}}}}}]}}, 0x0)

02:55:46 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})

02:55:46 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})

02:55:46 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x4000)

02:55:46 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})

02:55:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x7ffff000}], 0x1)

02:55:46 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  581.821043][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.855949][T21304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:47 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})

[  581.925048][T21304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.980469][T21304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.019401][T21315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.041125][T21315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.069377][T21315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:47 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x4000)

02:55:47 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:48 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x8b, 0x4, 0x9eb}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000000), 0x0}, 0x20)

02:55:48 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:48 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:55:48 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  583.373248][T21350] kvm [21349]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xffffffff0000000f
[  583.404109][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000003c data 0xffffffff0000002d
02:55:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  583.454593][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000049 data 0xffffffff00000079
[  583.514205][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000008f data 0xffffffff00000093
02:55:48 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x4000)

[  583.567534][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000063 data 0xffffffff00000021
[  583.634761][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000008d data 0xffffffff000000c7
[  583.709751][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000086 data 0xffffffff0000002d
[  583.791579][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000049 data 0xffffffff00000097
02:55:49 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[  583.878543][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000012 data 0xffffffff00000093
[  583.990851][T21350] kvm [21349]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000008 data 0xffffffff00000031
02:55:49 executing program 4:
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = syz_io_uring_setup(0x15a5, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x4}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:55:49 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000200)='./file0\x00')
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00')

02:55:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:55:49 executing program 4:
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = syz_io_uring_setup(0x15a5, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x4}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:55:49 executing program 3:
r0 = socket$inet(0x2, 0x2000000000003, 0x2)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c)

02:55:49 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create(0xfffffff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pipe(0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

02:55:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:55:50 executing program 4:
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = syz_io_uring_setup(0x15a5, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x4}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:55:50 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
r1 = inotify_init()
r2 = dup3(r0, r1, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040))

[  584.820139][T21405] net_ratelimit: 2256 callbacks suppressed
[  584.826411][T21405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:50 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0)

[  584.885216][T21405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:50 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x2, 0x1}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), &(0x7f0000000440)=""/130}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0), &(0x7f0000000340)=""/203}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20)

[  584.941414][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.949793][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.967028][T21414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.014938][T21414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:50 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
r1 = inotify_init()
r2 = dup3(r0, r1, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040))

[  585.064820][T21414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:50 executing program 4:
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = syz_io_uring_setup(0x15a5, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x4}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:55:50 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0)
dup2(r0, r1)

[  585.111578][T21424] virtio-fs: tag <(null)> not found
[  585.121497][T21427] virtio-fs: tag <(null)> not found
[  585.139831][T21414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.174701][T21414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  585.216240][T21414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:50 executing program 3:
syz_emit_ethernet(0x136, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8b7309", 0x100, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x1e, "d175f27720142d7b781adc7680f3510218d421500ea83033381d01cc585e3196f9e39957c651503df3f9fb8d9dad4d5c6e56a53c019ff0823b7f1d4c8927d748979a51ced71129ad466c90390f3776324f5f8e1bdc5413e241e57c26065b33921f02738936e70fc043a48573f819c5c2bcc5da4c12e3bd0a35b50602a36986211e20fb110f09cae9176fd5a8b46ebfa698ec9223b3f16e18a2b9a46641ce7fcf7a24e6286f7503694ab0f91ebe68e26e93471ce8912e3aa9a6be0d8f1aead70bdc32fed4510860e9f31fa96892f15c629cfeacb3bc1b8531680772ff208121c072fc9463becb99b1d1f434bf14e8"}]}}}}}}, 0x0)

02:55:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x4080, 0x0)

02:55:51 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
r1 = inotify_init()
r2 = dup3(r0, r1, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040))

02:55:51 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @private}, 0x2}}, 0x2e)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)

02:55:51 executing program 3:
syz_emit_ethernet(0x136, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8b7309", 0x100, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x1e, "d175f27720142d7b781adc7680f3510218d421500ea83033381d01cc585e3196f9e39957c651503df3f9fb8d9dad4d5c6e56a53c019ff0823b7f1d4c8927d748979a51ced71129ad466c90390f3776324f5f8e1bdc5413e241e57c26065b33921f02738936e70fc043a48573f819c5c2bcc5da4c12e3bd0a35b50602a36986211e20fb110f09cae9176fd5a8b46ebfa698ec9223b3f16e18a2b9a46641ce7fcf7a24e6286f7503694ab0f91ebe68e26e93471ce8912e3aa9a6be0d8f1aead70bdc32fed4510860e9f31fa96892f15c629cfeacb3bc1b8531680772ff208121c072fc9463becb99b1d1f434bf14e8"}]}}}}}}, 0x0)

02:55:51 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x31, 0x0, 0x8, 0x8, 0x8, 0x81})

02:55:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d318500c43)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)

02:55:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:51 executing program 4:
r0 = socket(0x22, 0x80002, 0x4)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0xffffffffffffffff)

02:55:51 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @private}, 0x2}}, 0x2e)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)

02:55:51 executing program 3:
syz_emit_ethernet(0x136, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8b7309", 0x100, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x1e, "d175f27720142d7b781adc7680f3510218d421500ea83033381d01cc585e3196f9e39957c651503df3f9fb8d9dad4d5c6e56a53c019ff0823b7f1d4c8927d748979a51ced71129ad466c90390f3776324f5f8e1bdc5413e241e57c26065b33921f02738936e70fc043a48573f819c5c2bcc5da4c12e3bd0a35b50602a36986211e20fb110f09cae9176fd5a8b46ebfa698ec9223b3f16e18a2b9a46641ce7fcf7a24e6286f7503694ab0f91ebe68e26e93471ce8912e3aa9a6be0d8f1aead70bdc32fed4510860e9f31fa96892f15c629cfeacb3bc1b8531680772ff208121c072fc9463becb99b1d1f434bf14e8"}]}}}}}}, 0x0)

02:55:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d318500c43)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)

02:55:51 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
r1 = inotify_init()
r2 = dup3(r0, r1, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040))

02:55:51 executing program 4:
r0 = socket(0x22, 0x80002, 0x4)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0xffffffffffffffff)

02:55:51 executing program 3:
syz_emit_ethernet(0x136, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8b7309", 0x100, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x1e, "d175f27720142d7b781adc7680f3510218d421500ea83033381d01cc585e3196f9e39957c651503df3f9fb8d9dad4d5c6e56a53c019ff0823b7f1d4c8927d748979a51ced71129ad466c90390f3776324f5f8e1bdc5413e241e57c26065b33921f02738936e70fc043a48573f819c5c2bcc5da4c12e3bd0a35b50602a36986211e20fb110f09cae9176fd5a8b46ebfa698ec9223b3f16e18a2b9a46641ce7fcf7a24e6286f7503694ab0f91ebe68e26e93471ce8912e3aa9a6be0d8f1aead70bdc32fed4510860e9f31fa96892f15c629cfeacb3bc1b8531680772ff208121c072fc9463becb99b1d1f434bf14e8"}]}}}}}}, 0x0)

02:55:51 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @private}, 0x2}}, 0x2e)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)

02:55:51 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x107, 0x8, 0x0, 0x960000)

02:55:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d318500c43)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)

02:55:51 executing program 4:
r0 = socket(0x22, 0x80002, 0x4)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0xffffffffffffffff)

02:55:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:52 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)

02:55:52 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
fcntl$notify(r2, 0x402, 0xb1c661d318500c43)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$notify(r2, 0x402, 0xb1c661d398500c73)

02:55:52 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @private}, 0x2}}, 0x2e)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)

02:55:52 executing program 3:
r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006)

02:55:52 executing program 4:
r0 = socket(0x22, 0x80002, 0x4)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0xffffffffffffffff)

[  586.894490][T21501] sp0: Synchronizing with TNC
02:55:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:52 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)

02:55:52 executing program 3:
r0 = perf_event_open(&(0x7f0000000280)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x150, 0x0, 0x148, 0x150, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'macsec0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'macvtap0\x00', {0x0, 0x0, 0x200, 0x0, 0x0, 0xec, 0x7}}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}, 0xa}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)

02:55:52 executing program 0:
syz_open_dev$audion(&(0x7f0000002700)='/dev/audio#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  587.246068][T21534] xt_socket: unknown flags 0x8
[  587.312752][T21535] sp0: Synchronizing with TNC
02:55:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

[  587.400427][T21534] xt_socket: unknown flags 0x8
02:55:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:53 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)

02:55:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00df"], 0x30}}, 0x0)

02:55:53 executing program 0:
syz_open_dev$audion(&(0x7f0000002700)='/dev/audio#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:55:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:53 executing program 3:
r0 = semget$private(0x0, 0x4000000009, 0x0)
semop(r0, &(0x7f0000000180)=[{0x0, 0xfff7}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x1, 0xfffb}, {}], 0x2)
semtimedop(r0, &(0x7f00000002c0)=[{0x1, 0x40}], 0x1, 0x0)

02:55:53 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7)

02:55:53 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

[  588.371290][T21574] sp0: Synchronizing with TNC
02:55:53 executing program 0:
syz_open_dev$audion(&(0x7f0000002700)='/dev/audio#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:55:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:54 executing program 5:
r0 = socket(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

02:55:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x2d, 0x40)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "bedd3f879d6d9607902b84e912"}, 0xe, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, 0x0}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x30}}, 0x20000000)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

02:55:54 executing program 0:
syz_open_dev$audion(&(0x7f0000002700)='/dev/audio#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:55:54 executing program 5:
r0 = socket(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

02:55:54 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2f00000030000507d20300648c63940d0135fc60100012400c00020002000000374119c33a71551788557a7123afd2", 0x2f}], 0x1}, 0x0)

02:55:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:55:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  589.823659][T21603] net_ratelimit: 1549 callbacks suppressed
[  589.823738][T21603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.888873][T21603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.029943][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.079945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.089218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.098304][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.106690][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.115025][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.123463][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.131814][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:55:55 executing program 5:
r0 = socket(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

02:55:55 executing program 4:
select(0x40, &(0x7f0000000a00), &(0x7f0000000a40), 0x0, &(0x7f0000000ac0))

02:55:56 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

02:55:56 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2f00000030000507d20300648c63940d0135fc60100012400c00020002000000374119c33a71551788557a7123afd2", 0x2f}], 0x1}, 0x0)

02:55:56 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r0, &(0x7f0000000a40))

02:55:56 executing program 5:
r0 = socket(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)

02:55:56 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x3b, 0xfffffffffffffffe, &(0x7f0000000100))

02:55:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

02:55:56 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2f00000030000507d20300648c63940d0135fc60100012400c00020002000000374119c33a71551788557a7123afd2", 0x2f}], 0x1}, 0x0)

[  590.958800][   T34] audit: type=1326 audit(1605581756.164:84): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x7ffc0000
02:55:56 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

[  590.992688][   T34] audit: type=1326 audit(1605581756.194:85): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45deb9 code=0x7ffc0000
[  591.026690][   T34] audit: type=1326 audit(1605581756.194:86): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45deb9 code=0x7ffc0000
[  591.103610][   T34] audit: type=1326 audit(1605581756.274:87): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x7ffc0000
[  591.204830][   T34] audit: type=1326 audit(1605581756.274:88): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x45deb9 code=0x7ffc0000
[  591.220627][T21678] IPVS: ftp: loaded support on port[0] = 21
[  591.365168][   T34] audit: type=1326 audit(1605581756.274:89): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x7ffc0000
[  591.390597][   T34] audit: type=1326 audit(1605581756.274:90): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45deb9 code=0x7ffc0000
[  591.430785][   T34] audit: type=1326 audit(1605581756.274:91): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=21659 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45deb9 code=0x7ffc0000
[  591.953583][T21678] IPVS: ftp: loaded support on port[0] = 21
02:55:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:55:57 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b06, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\x06\x00\x00\x00\x7f\x00\x00\x00\x03\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d')
close(0xffffffffffffffff)

02:55:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

02:55:57 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2f00000030000507d20300648c63940d0135fc60100012400c00020002000000374119c33a71551788557a7123afd2", 0x2f}], 0x1}, 0x0)

02:55:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

02:55:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:55:59 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b06, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\x06\x00\x00\x00\x7f\x00\x00\x00\x03\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d')
close(0xffffffffffffffff)

02:55:59 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="30ba02aec689aa78b8fc445ac72b0398657c33dcc5e4b853ac261c2f2b33d0698157ac07bdb4dfb94993729445b540b1e1936cef838bacebc49d7423f35724f87e4976fb59cad31f9f0e570779cf6078aca22089260603c33aa0a01d5d02355d449f702a87646de9c9912b9e2a3d4ad9da17328b2069fb6afa5554ca21087726c643a36f09b9d05d90c982febb5ed8cd7fb59a5e00144c27c1e95d4f29bab404c6f4780e5f2d3a595e09713345117916aadd51aa8d9ce2d4ac96d5bbd9db94faba452e9a7f5eb20455e93c0492da5ac297b94213cc133f62edcd688f76bf11feb7099dd44e1fc677039055eabe2c9e3dc4551bea94726a6c544b866c4a1a6066270dfc48f6785ed11a5ddf5a9625501ac3ccde0f867a6a4b9261cc7a8d961c890d3d1b1c107fa2ebe820543c8309e30ca84f2dd4e33ed39102405ce6007813071bf5feb8d69651bbfc4f188bfffa2705724b39094cc15dee3354e67bd49a7e144f4878298dbc17a1282e5d8e5ec63e55839f1d112e93036cf93acb1367619e028892b4bcd12ffe7e2ba7f268ad47b2ef39cbf7ff01403ef625193044208fe48045cf929112bc9b68988b7657f952b72dd801ac37a9d1d605775d4d59b77802cb6728b6719d2b4b9d83cad54201233f0c560cd2b00d4a789bb8ee70c9e633063923328c866c7d7b15e5904a46ccf2cdccdb52466d048e1a79fa590382454e231088bdb3911cd8feb946ab81f6a383e25ff158a3cbb421f4b190569469d7239e14ae1c4dc6ecf2e13dea33f132ffda70975c0d1790c39e214e2c62d4f1863af4697cc65d7ef1b4019b7aff89a0ae719ecc9d7a0d1ed5f1b714f3596bab6d478957c075f9ff93f73916ea78afada6d832e49082253e0e460fc4c8445e89c22f30bfad30a7dbc50d4c4dff6cce10c9a8138096f48138477e1ac21b9fcae5bfd1403139b0c751cad45fde057c20a914800890226558b9981680d50839a8d3592eb0fbcc492b339b16ba9f96a3fc77960252dce299b3d6db999545f2d794f74b784a054ffa7cdc69dea808643aed2c27bf0086eebd908d9ab9a43dfe42df740181f794c15460a59b3ee878826b8d4993be65cdedda68402effadab4f1b675bd1387e9ca420f323296726499acd5a264331e635cef03019da2c54ce0b53c367f210d828a1f9e266b0891525df814c921e2578b9be97b0f1f15b2156e7006cd3bb0fd8c5d99ac2039633c3d271d2b402d0be614c249e857f7afd42cb77b6f23c44c3614021ab9f35bdb031f8e51c81e292a63bd90fda058b19989f4e8d5b53ce88dcb02f7695ad58ce983a1712332bc9e0e6d7b37c72b9141227c29333ebf8f543939457d99b8fe675afb7a80465c7079a9784339bea5b59c69f83b4da62b764d93405da6e97568406d917c0ede440423ffd6784d147fa7d1ca8d5cd22947f0ebb0b4046"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

02:55:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

02:55:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x9}]}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x84)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

02:55:59 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b06, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\x06\x00\x00\x00\x7f\x00\x00\x00\x03\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d')
close(0xffffffffffffffff)

[  594.183046][T21793] IPVS: ftp: loaded support on port[0] = 21
02:55:59 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b06, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\x06\x00\x00\x00\x7f\x00\x00\x00\x03\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d')
close(0xffffffffffffffff)

[  595.430814][ T3130] net_ratelimit: 13 callbacks suppressed
[  595.430825][ T3130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:56:00 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

02:56:00 executing program 1:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

02:56:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:56:00 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind(r1, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80)

[  595.804408][T21854] IPVS: ftp: loaded support on port[0] = 21
[  596.039049][T21855] IPVS: ftp: loaded support on port[0] = 21
02:56:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:56:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setrlimit(0x7, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[  596.580767][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:01 executing program 1:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

02:56:02 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000180)='net/ipx\x00')

02:56:02 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

[  596.893612][T21915] IPVS: ftp: loaded support on port[0] = 21
[  597.066380][T21919] IPVS: ftp: loaded support on port[0] = 21
02:56:02 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000002c0)="f7f2bf3c0f339e00000000000000040000000000400000a1e67d63e9a7a72772236de78f0e62180f2de982090f9d39cf602f76a4690dd5743fcd1a3407cd4e952a62140ad915925c58ff1b859ad61a9cb1bf3460ad60bb92639cbedd55c6c29ca5f617fa53682abf0970a377337ca862a213b5cd8d1e78f0615729a5422e5c923116755eb4c0ab4f1ab9953e285d95db7930c289e2422919cf6e12ebd8e231c74cca472c493fdf3b2661"}}], 0x1c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

[  597.580615][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:02 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000002c0)="f7f2bf3c0f339e00000000000000040000000000400000a1e67d63e9a7a72772236de78f0e62180f2de982090f9d39cf602f76a4690dd5743fcd1a3407cd4e952a62140ad915925c58ff1b859ad61a9cb1bf3460ad60bb92639cbedd55c6c29ca5f617fa53682abf0970a377337ca862a213b5cd8d1e78f0615729a5422e5c923116755eb4c0ab4f1ab9953e285d95db7930c289e2422919cf6e12ebd8e231c74cca472c493fdf3b2661"}}], 0x1c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

[  597.668553][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.690896][T21968] ptrace attach of "/root/syz-executor.2"[21966] was attempted by "/root/syz-executor.2"[21968]
[  598.705033][T21975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:56:04 executing program 1:
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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"})
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)

02:56:04 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r0, 0x0, &(0x7f0000000ac0))

02:56:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

[  598.947924][T21983] IPVS: ftp: loaded support on port[0] = 21
02:56:04 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="3100000012000900690006342fc56aef40c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0x4e326d0846e0c13d, 0x0, 0x0, "", [@address_filter={0x24, 0x1a, {@in6=@mcast2, @in=@private}}]}, 0x38}, 0x8}, 0x0)

[  599.449092][T22013] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[  599.625038][T22012] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
02:56:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:56:04 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200807f4, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
close(r3)
pipe(&(0x7f00000000c0))
shutdown(r0, 0x1)
splice(r0, 0x0, r3, 0x0, 0xc0, 0x0)

[  599.748326][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.783295][T22016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002a00050bd25a80648c63940d0324fc60100002400a000200091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0)

[  599.840574][T22016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.861067][T22016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.880819][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="24000000180007841dfffd946f61050002008100fd038b0502000800080012000a00ff7e280000001100ffffba16a0aa1c09001b04694c5d3b33af00000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

02:56:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002a00050bd25a80648c63940d0324fc60100002400a000200091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0)

[  600.110185][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  600.164387][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
02:56:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002a00050bd25a80648c63940d0324fc60100002400a000200091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0)

[  600.621344][T11867] net_ratelimit: 7 callbacks suppressed
[  600.621354][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:06 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000002c0)="f7f2bf3c0f339e00000000000000040000000000400000a1e67d63e9a7a72772236de78f0e62180f2de982090f9d39cf602f76a4690dd5743fcd1a3407cd4e952a62140ad915925c58ff1b859ad61a9cb1bf3460ad60bb92639cbedd55c6c29ca5f617fa53682abf0970a377337ca862a213b5cd8d1e78f0615729a5422e5c923116755eb4c0ab4f1ab9953e285d95db7930c289e2422919cf6e12ebd8e231c74cca472c493fdf3b2661"}}], 0x1c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

[  600.788629][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0xec6}}]}, 0x24}}, 0x0)

[  601.828383][T21975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002a00050bd25a80648c63940d0324fc60100002400a000200091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0)

02:56:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)

02:56:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x44}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0)

02:56:07 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000480)={0x1, 0x5})

02:56:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:56:08 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', r1}, 0x10)
close(r0)

02:56:08 executing program 0:
msgsnd(0xffffffffffffffff, &(0x7f0000000000), 0x4, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x5, 0x4, 0x0)
munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000)

02:56:08 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0)

[  602.883080][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:08 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', r1}, 0x10)
close(r0)

02:56:08 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
io_setup(0x9, &(0x7f00000001c0)=<r1=>0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e4}])

[  603.660024][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:09 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000002c0)="f7f2bf3c0f339e00000000000000040000000000400000a1e67d63e9a7a72772236de78f0e62180f2de982090f9d39cf602f76a4690dd5743fcd1a3407cd4e952a62140ad915925c58ff1b859ad61a9cb1bf3460ad60bb92639cbedd55c6c29ca5f617fa53682abf0970a377337ca862a213b5cd8d1e78f0615729a5422e5c923116755eb4c0ab4f1ab9953e285d95db7930c289e2422919cf6e12ebd8e231c74cca472c493fdf3b2661"}}], 0x1c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

02:56:09 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x35]}}]})

02:56:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', r1}, 0x10)
close(r0)

[  603.907973][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.947947][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:10 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x35]}}]})

02:56:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:56:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:56:10 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', r1}, 0x10)
close(r0)

02:56:10 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000001440)=""/4096, 0x7})

02:56:10 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x35]}}]})

02:56:10 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

02:56:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:56:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  605.978694][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.698682][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:56:12 executing program 5:
mq_notify(0xffffffffffffffff, 0x0)

02:56:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)='86', 0x2}], 0x1)

02:56:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

02:56:12 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x35]}}]})

02:56:12 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa0})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000069, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}])

02:56:12 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x0)

[  607.028311][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:12 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x50000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)

02:56:12 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x0)

02:56:12 executing program 1:
syz_open_dev$sg(&(0x7f0000001b00)='/dev/sg#\x00', 0x0, 0x66480)

02:56:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/diskstats\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4100, 0x1004}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x140, &(0x7f0000002300)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

02:56:12 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100))
dup2(r0, r1)

02:56:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/diskstats\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4100, 0x1004}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x140, &(0x7f0000002300)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

02:56:12 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x0)

02:56:12 executing program 0:
clone3(0xfffffffffffffffd, 0xa2)

02:56:12 executing program 1:
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='$\xac\\\\\x00', &(0x7f0000000080)='\x00', r1)

02:56:12 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/diskstats\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4100, 0x1004}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x140, &(0x7f0000002300)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

02:56:12 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x86, &(0x7f0000000040)=""/134}, &(0x7f00000004c0)="d2607a2dd6ec", 0x0, 0x0, 0x0, 0x0, 0x0})

02:56:12 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100))
dup2(r0, r1)

02:56:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x50000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)

02:56:13 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x0)

02:56:13 executing program 1:
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='$\xac\\\\\x00', &(0x7f0000000080)='\x00', r1)

02:56:13 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/diskstats\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4100, 0x1004}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x140, &(0x7f0000002300)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
tkill(r2, 0x40)

02:56:13 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

02:56:13 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100))
dup2(r0, r1)

02:56:13 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r1, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}]}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x61, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000340)=0x44)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000100", @ANYRES16=r5, @ANYBLOB="00012dbd7000fbdbdf251a000000050092000300000008009a000000000008009a000000000008009a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x21}, 0x4)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20001552da", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000314000280080002009d01000008000200060000000000000000000000000000000000e413349768af442c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x74}}, 0x0)

02:56:13 executing program 1:
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='$\xac\\\\\x00', &(0x7f0000000080)='\x00', r1)

[  608.067351][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

[  608.130937][T22198] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[  608.170329][T22199] mmap: syz-executor.0 (22199): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
02:56:13 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100))
dup2(r0, r1)

[  608.273709][T22201] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  608.295493][T22201] bond1: (slave ip6tnl2): Error -95 calling set_mac_address
02:56:13 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)

02:56:13 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

02:56:14 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x50000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)

02:56:14 executing program 1:
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='$\xac\\\\\x00', &(0x7f0000000080)='\x00', r1)

02:56:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:56:14 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

[  608.911548][T22198] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
02:56:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:56:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:56:14 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000003380)={@private0, 0x0, 0x1, 0x0, 0xc}, 0x20)

02:56:14 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)

02:56:14 executing program 0:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

[  609.113184][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:56:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:56:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

[  609.500166][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.740182][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:15 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x50000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)

02:56:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

02:56:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)

02:56:15 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0))
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0g}\x9b9\xc1c7^0\xb9\x80\xc3\x8f\'\x9c\x06)\xfcOE\xcf\xbb\xe4\xe6\x93\x02E\n\xe8\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000007c0)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

02:56:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

02:56:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffff9c, 0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
r0 = gettid()
tkill(r0, 0x31)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:56:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

02:56:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)

02:56:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

02:56:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffff)

[  610.138366][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

02:56:15 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
read$sequencer(r2, 0x0, 0x0)

02:56:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

02:56:16 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

02:56:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

02:56:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:56:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3, 0x0, [{0x0, 0x0, 0x0, [], 0xff}]}})

02:56:16 executing program 1:
syz_io_uring_setup(0x2477, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
clone3(&(0x7f0000000740)={0x10000100, 0x0, 0x0, &(0x7f0000000380), {}, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x0], 0x1}, 0x58)

02:56:16 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x400454ca, 0x400000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ff0900bfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c222375e37391b130150c62fc2868f020000000000000013a80c19aab9d611f5969f62c28b22756bedf3cf393d14c46cc4f716da4f0de8163f6242fa7323f1740637c48468766a1841439fce41f144631ac262dcae18c3d1a1fbe96dd87035b44174f705000000089abdb46291975e551558050400ff0498dc4ea1d75d3066d52dbb55d0e331a5fb33abadd3a0c218078be8d75aab74745b0e65bd9e1c1ef1de7c0bdf84ad71bfc7c281251ab136740a4781353d114e024762f07612b1c3d686f1264c8fc62e06000000fda8c226f236b2b017b569762fa39884bd1dc08eb9d6c91b9364b7bcf572d0cb617949863303de732a92ce1bdc2fc568652ea4e96ceb14693c84382d3b09a100004214368880974800000000000000000000ae8d804b53c7e864d994800486ce4d2f3b58c347ef31f1d41d2b16454add03e2aec5f9649c770cfa9b47b812c79bf0a685ce152bc4fdb7c49e5c46e8ff8902de09ff8fe3918703d76f656fe7dfe5709f06f2dcc31cc45cd47496cd4a986d61ecda26f6e76e4668a8e3b006dbf68ffad981c947504a1592f80380ef75c92a79fcd9e922bce91b4fad0fcd16525c119b524ba3f281efb6f48d8be0e6310e531ef5726e"], &(0x7f0000000280)='GPL\x00'}, 0x48)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r2)
dup2(r0, r1)

02:56:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x3c, 0x0, &(0x7f0000cab000))

02:56:16 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x40, 0xa7, 0x1a, 0x10, 0x10cf, 0x5501, 0xdb77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x95}}]}}]}}, 0x0)

02:56:16 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$thread_pidfd(0xffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000140)='\xb3', 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0)
readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000007140)=""/122, 0x7a)

02:56:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae8, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  611.234734][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:16 executing program 2:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

[  611.747870][T11862] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  612.008379][T11862] usb 1-1: Using ep0 maxpacket: 16
02:56:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

02:56:17 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000c08000800080000b70000", 0x52)

02:56:17 executing program 4:
fanotify_mark(0xffffffffffffffff, 0x80, 0x10000000, 0xffffffffffffffff, 0x0)

02:56:17 executing program 2:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

02:56:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

02:56:17 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000c08000800080000b70000", 0x52)

02:56:17 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

[  612.298833][T11862] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=db.77
[  612.306198][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.315915][T11862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
02:56:17 executing program 2:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

[  612.383040][T11862] usb 1-1: Product: syz
[  612.413884][T11862] usb 1-1: Manufacturer: syz
[  612.454915][T11862] usb 1-1: SerialNumber: syz
[  612.487400][T11862] usb 1-1: config 0 descriptor??
[  612.621323][T11862] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  612.779434][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.795853][ T9809] usb 1-1: USB disconnect, device number 14
[  613.362804][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.567720][ T9809] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  613.807676][ T9809] usb 1-1: Using ep0 maxpacket: 16
[  614.137784][ T9809] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=db.77
[  614.146866][ T9809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.155825][ T9809] usb 1-1: Product: syz
[  614.160427][ T9809] usb 1-1: Manufacturer: syz
[  614.165181][ T9809] usb 1-1: SerialNumber: syz
[  614.180694][ T9809] usb 1-1: config 0 descriptor??
[  614.239770][ T9809] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device.
02:56:19 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x40, 0xa7, 0x1a, 0x10, 0x10cf, 0x5501, 0xdb77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x95}}]}}]}}, 0x0)

02:56:19 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000c08000800080000b70000", 0x52)

02:56:19 executing program 2:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

02:56:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

02:56:19 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

02:56:19 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  614.353106][T11862] usb 1-1: USB disconnect, device number 15
[  614.392939][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:19 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000c08000800080000b70000", 0x52)

02:56:20 executing program 1:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
read(r0, &(0x7f0000000480)=""/255, 0xff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x404c534a, &(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
r1 = getpgrp(0xffffffffffffffff)
tkill(r1, 0x1004000000016)

02:56:20 executing program 2:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

[  614.887653][T11862] usb 1-1: new high-speed USB device number 16 using dummy_hcd
02:56:20 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000380)={0x5, 0x5, 0x80000000})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x409, 0x1, {0xb, @pix={0x0, 0x1f}}})
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x3})
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x9, @vbi={0xfff, 0x0, 0x7fff, 0x37f52d75f4bd1a5f, [0x5], [0x7, 0x4], 0x108}})
dup2(r3, r1)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2202023, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_submit(r0, 0x0, &(0x7f00000000c0))

[  615.128185][T11862] usb 1-1: Using ep0 maxpacket: 16
02:56:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x230, 0x240, 0x240, 0x230, 0x240, 0x3, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0x108, 0x138, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

02:56:20 executing program 2:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

[  615.408351][T11862] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=db.77
[  615.436741][T11862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.514582][T11862] usb 1-1: Product: syz
[  615.555737][T11862] usb 1-1: Manufacturer: syz
[  615.592376][T11862] usb 1-1: SerialNumber: syz
[  615.659525][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.679805][T11862] usb 1-1: config 0 descriptor??
[  615.818331][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.840283][T11862] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  616.018582][T11862] usb 1-1: USB disconnect, device number 16
02:56:21 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x40, 0xa7, 0x1a, 0x10, 0x10cf, 0x5501, 0xdb77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x95}}]}}]}}, 0x0)

02:56:21 executing program 1:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

02:56:21 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62f27d64cd"], 0x5)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

02:56:21 executing program 3:
socket$l2tp(0x2, 0x2, 0x73)

02:56:21 executing program 2:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

02:56:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0, 0x0, 0x0, 0x2}]})

02:56:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000006280)=[{{&(0x7f0000000000)={0x2, 0x4e1d, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}], 0x20}}], 0x1, 0x0)

[  616.700088][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0, 0x0, 0x0, 0x2}]})

02:56:22 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62f27d64cd"], 0x5)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

02:56:22 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000400)=@generic={0x8})

[  616.927630][T11862] usb 1-1: new high-speed USB device number 17 using dummy_hcd
02:56:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0, 0x0, 0x0, 0x2}]})

02:56:22 executing program 1:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

[  617.167650][T11862] usb 1-1: Using ep0 maxpacket: 16
[  617.448183][T11862] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=db.77
[  617.467501][T11862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.493826][T11862] usb 1-1: Product: syz
[  617.516820][T11862] usb 1-1: Manufacturer: syz
[  617.527218][T11862] usb 1-1: SerialNumber: syz
[  617.550435][T11862] usb 1-1: config 0 descriptor??
[  617.591122][T11862] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  617.737661][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.840879][T11862] usb 1-1: USB disconnect, device number 17
02:56:23 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62f27d64cd"], 0x5)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

02:56:23 executing program 3:
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x11e}], 0x1, &(0x7f0000000180)=ANY=[])

02:56:23 executing program 2:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

02:56:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0, 0x0, 0x0, 0x2}]})

02:56:23 executing program 1:
process_vm_writev(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

02:56:23 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x40, 0xa7, 0x1a, 0x10, 0x10cf, 0x5501, 0xdb77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x95}}]}}]}}, 0x0)

02:56:23 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62f27d64cd"], 0x5)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

02:56:23 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x80201, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/9, &(0x7f0000000140)=0x9)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000940)={{}, "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"})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
pipe2(0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x1)

[  618.551669][T22591] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096)
[  618.632220][T22591] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096)
[  618.664043][T22591] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  618.741325][T22608] device bridge_slave_1 left promiscuous mode
[  618.764537][T22608] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.780425][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:24 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x80201, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/9, &(0x7f0000000140)=0x9)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000940)={{}, "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"})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
pipe2(0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x1)

[  618.845231][T22591] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096)
[  618.859752][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.869428][    T5] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  618.980591][T22591] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096)
[  618.987090][T22618] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.000311][T22618] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.031791][T22618] device bridge_slave_1 entered promiscuous mode
[  619.060962][T22618] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.069013][T22618] bridge0: port 2(bridge_slave_1) entered forwarding state
02:56:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x190, 0x150, 0x150, 0x190, 0x0, 0x280, 0x238, 0x238, 0x280, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @empty}, @remote, [], [], '\x00', 'veth0_to_hsr\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x12c00, 0x7}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xf9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)

[  619.087726][T22591] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  619.108598][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.121667][    T5] usb 1-1: Using ep0 maxpacket: 16
02:56:24 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x80201, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/9, &(0x7f0000000140)=0x9)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000940)={{}, "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"})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
pipe2(0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x1)

02:56:24 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106405, &(0x7f0000000140)={0x0, 0x0})

02:56:24 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="39000000140081ae0000dc676f97daf01e23578134662c300b2c000500018701546fabca1b4e7d06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

02:56:24 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0xd4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6}, 0x48)

02:56:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000340)={0x3})

02:56:24 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000801)

02:56:24 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x4, 0x0)

[  619.438293][    T5] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=db.77
[  619.457765][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.488513][    T5] usb 1-1: Product: syz
[  619.513068][    T5] usb 1-1: Manufacturer: syz
[  619.543378][    T5] usb 1-1: SerialNumber: syz
[  619.578155][    T5] usb 1-1: config 0 descriptor??
[  619.651167][    T5] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  619.817467][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.874685][    T5] usb 1-1: USB disconnect, device number 18
02:56:25 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
rmdir(&(0x7f0000000180)='./file0\x00')

02:56:25 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000440), 0x8)
fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff)

02:56:25 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x80201, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/9, &(0x7f0000000140)=0x9)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000940)={{}, "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"})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]})
pipe2(0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x1)

02:56:25 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000000))

02:56:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000340)={0x3})

02:56:25 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)="1576", 0x2}])
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000340)={0x3})

02:56:25 executing program 3:
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x76, 0x141201)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230374be10000000000010000020f9"])
ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0)

02:56:25 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000040)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040)="08e7369321f83351", &(0x7f0000000580)=""/232, &(0x7f0000000880)="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", &(0x7f0000000680)="0f8cca974e15fe2f8906abbe3b6f7f290ff92cd350863c0f5c225d38ee85dc60cce6c0097a6549c25c541f6c357074d2fc947712dd279fb447181fde1b7caff3409dd9a3e52be79556e78731a76d031adb599a643fded4de98b2a65e4e6735fcf92648fbfd5c24754ba63d97682201eef4136ef1eaa962e35ed926a54105aa8d3d63bee13ebea66442f5b368264622b9949118a2a510b23eb4bfc38ae8b3e33e8d968452dd6ce0910e8f5b08d020eae90faa30d51c2ca3d446c5725e78f1a491b92575d387b644ee3bb6b817a35d04ae5b2b03d5b7a56fe71188386b43ba7011e4b0f89d30f208b0", 0x7ff, r1}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x20000040)

02:56:25 executing program 2:
syz_usb_connect$uac1(0x0, 0xc9, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902"], 0x0)

02:56:25 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2bf, 0x0, 0x0)

02:56:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000340)={0x3})

02:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0x24, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x24}}, 0x0)

[  620.809242][T22680] device geneve3 entered promiscuous mode
[  620.858738][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:26 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7e08, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="48000000000000000000000000000000b2b6a77f06ddcb33a8fac63016b69944fbc6b2c7a00100000000000000e99a70317fb463bed350139e79abe8fa8aac7ffc7f613357ff6200eea441d1bffa2e1b39a77327b59497f598e531f1b8ca433e4e34b20ee2f4db3aa287fd6c2aa299a8c7de2c0080b54cd9695e030c1e1cf4d8df49b65fc586d2ca3aa93783ac3cb9e753433f598d0cb4b6c7cf76bd05073b6ed165a691ae3fc3e33a9145c77d866db93bb1d1e3a73c7be825094687b146f5500c301e0c2be359df5a2339197ea3"], 0x48}}], 0x2, 0x0)

02:56:26 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2bf, 0x0, 0x0)

02:56:26 executing program 4:
rename(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00')

02:56:26 executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xd7, 0xcf, 0x40, 0x979, 0x227, 0x89a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1c, 0x87, 0x9a}}]}}]}}, 0x0)

[  621.548029][T22712] device geneve3 entered promiscuous mode
[  621.897511][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.014493][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:27 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)="1576", 0x2}])
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:27 executing program 3:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffc, 0x0)
write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x100000001})

02:56:27 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2bf, 0x0, 0x0)

02:56:27 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10000010002, 0x0)
mmap$usbfs(&(0x7f0000005000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x0)

02:56:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000040)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040)="08e7369321f83351", &(0x7f0000000580)=""/232, &(0x7f0000000880)="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", &(0x7f0000000680)="0f8cca974e15fe2f8906abbe3b6f7f290ff92cd350863c0f5c225d38ee85dc60cce6c0097a6549c25c541f6c357074d2fc947712dd279fb447181fde1b7caff3409dd9a3e52be79556e78731a76d031adb599a643fded4de98b2a65e4e6735fcf92648fbfd5c24754ba63d97682201eef4136ef1eaa962e35ed926a54105aa8d3d63bee13ebea66442f5b368264622b9949118a2a510b23eb4bfc38ae8b3e33e8d968452dd6ce0910e8f5b08d020eae90faa30d51c2ca3d446c5725e78f1a491b92575d387b644ee3bb6b817a35d04ae5b2b03d5b7a56fe71188386b43ba7011e4b0f89d30f208b0", 0x7ff, r1}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x20000040)

[  622.250098][T22731] device geneve3 entered promiscuous mode
02:56:27 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x9, "df08cfb22527"}})

02:56:27 executing program 3:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffc, 0x0)
write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x100000001})

02:56:27 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x2bf, 0x0, 0x0)

02:56:27 executing program 3:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffc, 0x0)
write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x100000001})

02:56:28 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0xffffffffffffff88}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x2, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @func, @volatile, @int, @array, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}]}}, 0x0, 0xfa}, 0x20)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019600)=""/102395, 0x18ffb}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  623.070397][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:28 executing program 2:
r0 = syz_usb_connect$uac1(0x0, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x20, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x40, 0x3, 0x2e, {0x7}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x6d, &(0x7f00000002c0)=@string={0x6d, 0x3, "dbbfb950ceb19370786d6bc87e144681f12b3f03c687476ee359c84915c5377869b9165cd977ca6fc93bcb6318c777a7b0422d714eb3128b2ec675e5230119a332899075d3c4ab31bb32a80b0a06a867586ff8c23f69abe5bc3251f3d805f6dd321ccbc9e992c0c27e36ee"}}]})
syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0xf, 0x2, {0x2}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000700)={0x20, 0x81, 0x2, "c0fc"}, &(0x7f0000000740)={0x20, 0x82, 0x2, '>,'}, 0x0, 0x0, 0x0})

02:56:28 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)="1576", 0x2}])
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000040)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040)="08e7369321f83351", &(0x7f0000000580)=""/232, &(0x7f0000000880)="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", &(0x7f0000000680)="0f8cca974e15fe2f8906abbe3b6f7f290ff92cd350863c0f5c225d38ee85dc60cce6c0097a6549c25c541f6c357074d2fc947712dd279fb447181fde1b7caff3409dd9a3e52be79556e78731a76d031adb599a643fded4de98b2a65e4e6735fcf92648fbfd5c24754ba63d97682201eef4136ef1eaa962e35ed926a54105aa8d3d63bee13ebea66442f5b368264622b9949118a2a510b23eb4bfc38ae8b3e33e8d968452dd6ce0910e8f5b08d020eae90faa30d51c2ca3d446c5725e78f1a491b92575d387b644ee3bb6b817a35d04ae5b2b03d5b7a56fe71188386b43ba7011e4b0f89d30f208b0", 0x7ff, r1}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x20000040)

02:56:29 executing program 3:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r1, 0x7ffffc, 0x0)
write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x100000001})

02:56:29 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

[  623.897855][T22791] device geneve3 entered promiscuous mode
02:56:29 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  624.137184][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:29 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

02:56:29 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

02:56:29 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

02:56:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000040)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040)="08e7369321f83351", &(0x7f0000000580)=""/232, &(0x7f0000000880)="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", &(0x7f0000000680)="0f8cca974e15fe2f8906abbe3b6f7f290ff92cd350863c0f5c225d38ee85dc60cce6c0097a6549c25c541f6c357074d2fc947712dd279fb447181fde1b7caff3409dd9a3e52be79556e78731a76d031adb599a643fded4de98b2a65e4e6735fcf92648fbfd5c24754ba63d97682201eef4136ef1eaa962e35ed926a54105aa8d3d63bee13ebea66442f5b368264622b9949118a2a510b23eb4bfc38ae8b3e33e8d968452dd6ce0910e8f5b08d020eae90faa30d51c2ca3d446c5725e78f1a491b92575d387b644ee3bb6b817a35d04ae5b2b03d5b7a56fe71188386b43ba7011e4b0f89d30f208b0", 0x7ff, r1}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x20000040)

[  624.754937][T22827] device geneve3 entered promiscuous mode
[  625.092933][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.177115][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:31 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, 0x0, &(0x7f0000000180))

02:56:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)="1576", 0x2}])
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:31 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

02:56:31 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:31 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:31 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

02:56:31 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x2)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0)

[  626.216871][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x11, 0x68, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'lo\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

02:56:31 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1000)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "41019434436b1980", "698001d0fedd7a3e92c4559f8e1f6c1f", "928117f6", "58d3c21fad3ebb88"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

02:56:31 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r3, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)
recvmmsg(r3, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

02:56:31 executing program 2:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xfffffffd, [], @p_u16=&(0x7f00000000c0)}})

02:56:31 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32353936313432303000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000457900aa5f634b37b3eeb32debc4d834010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="2000000024b304b624b304b600000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005c7bc8b50000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000477b71930000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3235393631343230302f66696c65302f66696c653000000000000000000000000000000000000000000000517c97ec0000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000733234d20000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00))

02:56:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_TXQLEN={0x8}]}, 0x48}}, 0x0)

02:56:32 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:32 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xfd, &(0x7f0000000140)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  627.257002][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.333780][T22887] batman_adv: Cannot find parent device
[  627.352822][T22887] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  627.397708][T22887] device ip6gretap1 entered promiscuous mode
02:56:32 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:32 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0xf18})
r1 = socket$nl_route(0x10, 0x3, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x2080, &(0x7f0000000180)={[{@index_on='index=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@context={'context', 0x3d, 'staff_u'}}]})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x82605}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bde8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_TTL={0x5, 0x8, 0xa9}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x9c}}, 0x20001000)

02:56:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_TXQLEN={0x8}]}, 0x48}}, 0x0)

02:56:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

02:56:32 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  627.648806][T22903] batman_adv: Cannot find parent device
[  627.670911][T22903] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  627.699584][T22903] device ip6gretap2 entered promiscuous mode
02:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_TXQLEN={0x8}]}, 0x48}}, 0x0)

02:56:33 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0xf18})
r1 = socket$nl_route(0x10, 0x3, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x2080, &(0x7f0000000180)={[{@index_on='index=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@context={'context', 0x3d, 'staff_u'}}]})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x82605}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bde8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_TTL={0x5, 0x8, 0xa9}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x9c}}, 0x20001000)

[  627.972877][T22925] batman_adv: Cannot find parent device
[  627.990451][T22925] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  628.008084][T22925] device ip6gretap3 entered promiscuous mode
02:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_TXQLEN={0x8}]}, 0x48}}, 0x0)

[  628.140864][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xfffffffffffffff9)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x34, &(0x7f0000000480)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}])

[  628.210402][T22938] batman_adv: Cannot find parent device
02:56:33 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0xf18})
r1 = socket$nl_route(0x10, 0x3, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x2080, &(0x7f0000000180)={[{@index_on='index=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@context={'context', 0x3d, 'staff_u'}}]})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x82605}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bde8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_TTL={0x5, 0x8, 0xa9}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x9c}}, 0x20001000)

[  628.267761][T22938] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  628.275737][T22938] device ip6gretap4 entered promiscuous mode
[  628.297008][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:33 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02010109080000000028040000ffff00030006001000000002000000e00000090000100000000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x2000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

[  628.708433][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.337480][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x7]})

02:56:35 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0xf18})
r1 = socket$nl_route(0x10, 0x3, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x2080, &(0x7f0000000180)={[{@index_on='index=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@context={'context', 0x3d, 'staff_u'}}]})
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x82605}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bde8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_TTL={0x5, 0x8, 0xa9}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x9c}}, 0x20001000)

02:56:35 executing program 2:
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x383f2440ba5813a9, 0x0, 0x0, 0x0)

02:56:35 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02010109080000000028040000ffff00030006001000000002000000e00000090000100000000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x2000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

02:56:35 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xe5, 0x96, 0x42, 0x40, 0x1f4d, 0x9016, 0x8ff0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x23, 0x2e, 0x64}}]}}]}}, 0x0)

02:56:35 executing program 4:
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002e0007d000"/20, @ANYRES32, @ANYBLOB="0000f0ff000000000000f1"], 0x30}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

[  630.377273][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:35 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{}, 0x1476b2f0eece133f, @in=@broadcast, 0x0, 0x1}]}]}, 0xfc}}, 0x0)

02:56:35 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02010109080000000028040000ffff00030006001000000002000000e00000090000100000000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x2000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

02:56:35 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000147b5c08d8130200329c000000010902120001000000000904"], 0x0)

02:56:35 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02010109080000000028040000ffff00030006001000000002000000e00000090000100000000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x2000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

02:56:35 executing program 2:
r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100))
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x8000000, 0x0)

02:56:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x7]})

02:56:35 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

[  630.706404][T21974] usb 4-1: new high-speed USB device number 8 using dummy_hcd
02:56:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x7]})

02:56:36 executing program 1:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0)

02:56:36 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10)
timerfd_gettime(0xffffffffffffffff, 0x0)

[  630.926322][    T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  631.176784][    T5] usb 5-1: Using ep0 maxpacket: 8
[  631.183169][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.257524][T21974] usb 4-1: New USB device found, idVendor=1f4d, idProduct=9016, bcdDevice=8f.f0
[  631.286851][T21974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.294902][T21974] usb 4-1: Product: syz
[  631.297086][    T5] usb 5-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=9c.32
[  631.313796][T21974] usb 4-1: Manufacturer: syz
[  631.325895][    T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.326339][T21974] usb 4-1: SerialNumber: syz
[  631.363008][    T5] usb 5-1: config 0 descriptor??
[  631.420038][T21974] usb 4-1: config 0 descriptor??
[  631.433837][    T5] usb 5-1: selecting invalid altsetting 3
[  631.455547][    T5] comedi comedi0: could not set alternate setting 3 in high speed
[  631.486720][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.492077][    T5] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  631.558671][    T5] usbdux: probe of 5-1:0.0 failed with error -22
[  631.635718][    T5] usb 5-1: USB disconnect, device number 6
[  631.727173][T21974] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  631.734968][T21974] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22
[  631.744977][T21974] usb 4-1: USB disconnect, device number 8
[  632.446188][T21974] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  632.496233][ T9542] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  632.547440][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.716228][T21974] usb 5-1: Using ep0 maxpacket: 8
[  632.886273][T21974] usb 5-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=9c.32
[  632.895477][T21974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.910602][T21974] usb 5-1: config 0 descriptor??
[  632.971247][T21974] usb 5-1: selecting invalid altsetting 3
[  632.979321][T21974] comedi comedi0: could not set alternate setting 3 in high speed
[  633.000492][T21974] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  633.022150][T21974] usbdux: probe of 5-1:0.0 failed with error -22
[  633.096242][ T9542] usb 4-1: New USB device found, idVendor=1f4d, idProduct=9016, bcdDevice=8f.f0
[  633.106240][ T9542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.114351][ T9542] usb 4-1: Product: syz
[  633.122817][ T9542] usb 4-1: Manufacturer: syz
[  633.129114][ T9542] usb 4-1: SerialNumber: syz
[  633.135351][ T9542] usb 4-1: config 0 descriptor??
[  633.177803][    T5] usb 5-1: USB disconnect, device number 7
02:56:38 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

02:56:38 executing program 2:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @broadcast}, "cee73ee8ee62c2ebf92fc100684e7cec4119cc56"}}}}, 0x0)

02:56:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x7]})

02:56:38 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000003880)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffffb8})

02:56:38 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

02:56:38 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000147b5c08d8130200329c000000010902120001000000000904"], 0x0)

[  633.406625][ T9542] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  633.413693][ T9542] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22
[  633.481901][ T9542] usb 4-1: USB disconnect, device number 9
02:56:38 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0, @multicast1, @remote}, &(0x7f0000000040)=0xc)

02:56:38 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000800))

[  633.604694][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:38 executing program 0:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0xb9)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r1)
accept4(r0, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/19, 0x13)

[  633.800212][T21976] usb 5-1: new high-speed USB device number 8 using dummy_hcd
02:56:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
socket$alg(0x26, 0x5, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)

02:56:39 executing program 2:
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="00400000f41f00000b2000000a000000000000000020000000040000f1303525840300001e000000000000000020cc070200010052654973457232467300000003000000020001000200000000000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003cc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00"/1056, 0x420, 0x12000}, {&(0x7f0000010700)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1800, 0x12800}, {&(0x7f0000011f00)="0000000000000000000000000a000000000000000020000000040000f1303525840300001e00"/64, 0x40, 0x4014000}, {&(0x7f0000012000)="010002005c1f0000000000000000000000000000000000000100000002000000000000000000000000002c00d41f0100010000000200000001000000f401000002003000a41f00"/96, 0x60, 0x4016000}, {&(0x7f0000012100)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003cc1655f3cc1655f3cc1655f0100000000000000", 0x60, 0x4017fa0}], 0x0, &(0x7f0000012200))

[  634.056404][T21976] usb 5-1: Using ep0 maxpacket: 8
02:56:39 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0))

[  634.186856][T21976] usb 5-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=9c.32
[  634.216057][T21976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.216281][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.278079][T21976] usb 5-1: config 0 descriptor??
02:56:39 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

02:56:39 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090258000101200000090400040302020002052406000005240000000d240f0100000000090000000008241c0000000000052401000007241400000000090581030002000004090582022000000000090503021e"], 0x0)

02:56:39 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

02:56:39 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x2})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xb21e, 0x4, {0x1, @raw_data="a3422ae8f7ab61525572582cf7baeb4ac10d9d14d019a0a471b4b4fa962ba751379fcc7fac58ed6021c4fdf0702d0890f786e64bfd0679c78a2563679b6c7b31a2c325ef8ddc7aac7e2eb9a716207e8e8316ee08e7458936cf3e15997525e728c42652fe4611cfac088363b35209059877dc3a66ac727cf654fffe6bf0f19428f8f773c523b8e2afba6a4fd6e0cc0a376bd427c8cfe661e3436e0eca01936c54c38d3a12205bcd83ccbdcbecfe181e51b9b5498438142eb10a9498ffbb7622a66900e41f803df3ff"}})

02:56:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

[  634.367560][T21976] usb 5-1: selecting invalid altsetting 3
[  634.373680][T21976] comedi comedi0: could not set alternate setting 3 in high speed
[  634.437118][T21976] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  634.469584][T21976] usbdux: probe of 5-1:0.0 failed with error -22
[  634.646766][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.737135][ T9809] usb 5-1: USB disconnect, device number 8
02:56:40 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000147b5c08d8130200329c000000010902120001000000000904"], 0x0)

02:56:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x10}]}, 0x44}}, 0x0)

02:56:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

02:56:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

02:56:40 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

02:56:40 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
unlink(&(0x7f0000000080)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000080)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004002630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

[  635.361470][T23149] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  635.441412][T23149] batman_adv: Cannot find parent device
02:56:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

02:56:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

02:56:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x10}]}, 0x44}}, 0x0)

[  635.665078][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.806110][T11862] usb 5-1: new high-speed USB device number 9 using dummy_hcd
02:56:41 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

[  635.885509][T23174] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  635.944445][T23174] batman_adv: Cannot find parent device
02:56:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x10}]}, 0x44}}, 0x0)

02:56:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

[  636.045908][T11862] usb 5-1: Using ep0 maxpacket: 8
[  636.166797][T11862] usb 5-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=9c.32
[  636.180844][T23182] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  636.192675][T11862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.233928][T23182] batman_adv: Cannot find parent device
[  636.253776][T11862] usb 5-1: config 0 descriptor??
[  636.310419][T11862] usb 5-1: selecting invalid altsetting 3
[  636.326111][T11862] comedi comedi0: could not set alternate setting 3 in high speed
[  636.333974][T11862] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  636.424183][T11862] usbdux: probe of 5-1:0.0 failed with error -22
[  636.531806][ T9542] usb 5-1: USB disconnect, device number 9
[  636.701397][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:42 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000147b5c08d8130200329c000000010902120001000000000904"], 0x0)

02:56:42 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0xcc, 0x7}, 0x40)
r1 = dup2(r0, r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x10, 0xffffffffffffffff}, 0x10)

02:56:42 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0))

02:56:42 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r2, r1, 0x0)

02:56:42 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

02:56:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x10}]}, 0x44}}, 0x0)

02:56:42 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0))

02:56:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0)

[  637.148725][T23211] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET)
[  637.159482][T23210] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
02:56:42 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r2, r1, 0x0)

[  637.213430][T23210] batman_adv: Cannot find parent device
[  637.256103][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:42 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0))

02:56:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0)

02:56:42 executing program 1:
socket$rds(0x15, 0x5, 0x0)

[  637.495959][T11862] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  637.745002][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.745767][T11862] usb 5-1: Using ep0 maxpacket: 8
[  637.896589][T11862] usb 5-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=9c.32
[  637.910364][T11862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.924778][T11862] usb 5-1: config 0 descriptor??
[  637.984137][T11862] usb 5-1: selecting invalid altsetting 3
[  637.990988][T11862] comedi comedi0: could not set alternate setting 3 in high speed
[  638.012625][T11862] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  638.029987][T11862] usbdux: probe of 5-1:0.0 failed with error -22
[  638.202668][T11862] usb 5-1: USB disconnect, device number 10
[  638.296049][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.305602][  T205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.316178][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.325582][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:43 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONTX(r0, 0x5414, &(0x7f0000000180)={0x0, 0x1, 0x0})

02:56:43 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

02:56:43 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0)

02:56:43 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0))

02:56:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0)

02:56:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000000000010000001400020077673200000000000000000000000000080005000000000024000300a0"], 0x54}}, 0x0)

[  638.803802][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:44 executing program 1:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, 0x0, &(0x7f0000000200)=0xffffffffffffffd0)

02:56:44 executing program 2:
r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x881, 0x0)
r1 = dup2(r0, r0)
r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
dup2(r2, r1)

02:56:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d197cf1a5a1f4dd1a23cb07d62"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0)

02:56:44 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}])
creat(&(0x7f0000000040)='./bus\x00', 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
pipe(&(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r1, 0x2000000000000072, &(0x7f0000000080))

02:56:44 executing program 4:
mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x1800004, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x5c)

02:56:44 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)={0x37, 0x6, 0x0, {0x0, 0x0, 0xe, 0x0, 'wp256-generic\x00'}}, 0x37)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1, 0x0)

02:56:44 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockname$inet6(r0, 0x0, &(0x7f0000000040))

[  639.374462][T23274] device syzkaller1 entered promiscuous mode
[  639.575964][ T4877] kworker/dying (4877) used greatest stack depth: 21792 bytes left
02:56:45 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

02:56:45 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x0, 0x0)

02:56:45 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x0, 0x0)
pselect6(0x19, &(0x7f0000000040)={0x2a}, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020)

02:56:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f2682f03f53ef010001000000e0f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]})

02:56:45 executing program 4:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x5, &(0x7f00000001c0), 0x4)

02:56:45 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10)
setresgid(0x0, 0x0, 0x0)

[  639.834451][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:45 executing program 4:
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x18)

02:56:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:45 executing program 5:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close_range(r0, 0xffffffffffffffff, 0x0)

[  640.018463][T23323] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
02:56:45 executing program 1:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x8000000000080001, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000100)='./bus/file1\x00')

[  640.115079][T23323] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,,errors=continue
[  640.297523][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:45 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r1, 0x6)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

02:56:45 executing program 4:
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x18)

[  640.690473][T23326] device syzkaller1 entered promiscuous mode
[  640.876979][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:46 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

02:56:46 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:46 executing program 4:
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x18)

02:56:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:46 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:46 executing program 5:
eventfd2(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x180}}, 0x0)
syz_open_procfs(0x0, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

02:56:46 executing program 4:
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x18)

02:56:46 executing program 5:
eventfd2(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x180}}, 0x0)
syz_open_procfs(0x0, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  641.896544][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:47 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000f4270012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

02:56:47 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

[  642.179167][T23377] device syzkaller1 entered promiscuous mode
[  643.253627][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.337653][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.348026][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.359725][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.369354][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.562062][T23393] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'.
02:56:49 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:49 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

02:56:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0)

[  643.822816][  T205] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
02:56:49 executing program 5:
eventfd2(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x180}}, 0x0)
syz_open_procfs(0x0, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

02:56:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94)

02:56:49 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_BT_SECURITY(r0, 0x107, 0x17, 0x0, 0x20000000)

[  644.339549][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94)

02:56:50 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x84, 0x1d, 0x0, &(0x7f0000004840))

02:56:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
r6 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

02:56:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000063110800000000009500000000000000242c57ef6169ed8014022d6985c1c4d5cde0a56053cc235563bafdd630ffc980d19ffd117db34d093eaf1a58de31a6208787bbe320766fdc389290ef7541b7cb88a7594567334cf990f35bc92d59681ddd2110c12004a9ac6df19756c829ff33103d39d3151eb264fdff79ae096b61f7b28f439a59b0af"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

02:56:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

[  645.202258][  T205] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.315143][T23445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
02:56:50 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x7ffffffff000}])

02:56:50 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x8000000000000003, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x80}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0)

[  645.416217][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:56:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

02:56:50 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x7ffffffff000}])

[  646.042377][  T205] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.070825][T23447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  646.104295][T23468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  646.418921][  T205] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.440650][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  646.456645][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.474200][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.506323][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.554072][ T9542] net_ratelimit: 1 callbacks suppressed
[  648.554083][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.175828][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.185691][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.197924][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.379231][  T205] device hsr_slave_0 left promiscuous mode
[  649.386410][  T205] device hsr_slave_1 left promiscuous mode
[  649.393990][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.401861][  T205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.412735][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.420316][  T205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  649.432895][  T205] device bridge_slave_1 left promiscuous mode
[  649.440957][  T205] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.451973][  T205] device bridge_slave_0 left promiscuous mode
[  649.458515][  T205] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.474673][  T205] device veth1_macvtap left promiscuous mode
[  649.481270][  T205] device veth0_macvtap left promiscuous mode
[  649.488064][  T205] device veth1_vlan left promiscuous mode
[  649.494026][  T205] device veth0_vlan left promiscuous mode
[  649.594459][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.634859][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.664121][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.734740][T11867] Bluetooth: hci5: command 0x0409 tx timeout
[  652.214707][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.714368][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.754567][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.814519][    T5] Bluetooth: hci5: command 0x041b tx timeout
[  654.120130][  T205] bond1 (unregistering): Released all slaves
[  654.292868][  T205] team0 (unregistering): Port device team_slave_1 removed
[  654.309864][  T205] team0 (unregistering): Port device team_slave_0 removed
[  654.321811][  T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  654.340214][  T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  654.410660][  T205] bond0 (unregistering): Released all slaves
[  654.464153][T23520] IPVS: ftp: loaded support on port[0] = 21
[  654.586880][T23520] chnl_net:caif_netlink_parms(): no params data found
[  654.671908][T23520] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.679229][T23520] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.690408][T23520] device bridge_slave_0 entered promiscuous mode
[  654.704167][T23520] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.714068][T23520] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.723826][T23520] device bridge_slave_1 entered promiscuous mode
[  654.757040][T23520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.770027][T23520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.792669][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.821540][T23520] team0: Port device team_slave_0 added
[  654.837684][T23520] team0: Port device team_slave_1 added
[  654.868895][T23520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.876578][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.906597][T23520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.922023][T23520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.930845][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.935718][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.966564][T23520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.005424][T23520] device hsr_slave_0 entered promiscuous mode
[  655.012088][T23520] device hsr_slave_1 entered promiscuous mode
[  655.021223][T23520] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  655.030302][T23520] Cannot create hsr debugfs directory
[  655.179513][T23520] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.187128][T23520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.194767][T23520] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.201878][T23520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.254602][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.313677][T23520] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.334147][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  655.345957][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.363188][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.390234][T23520] 8021q: adding VLAN 0 to HW filter on device team0
[  655.414159][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  655.435727][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.442802][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.479035][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  655.489441][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.496694][ T9744] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.518858][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  655.529154][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  655.538070][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  655.547648][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  655.564714][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  655.572797][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  655.582958][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  655.597664][T23520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  655.612993][T23520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  655.623004][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  655.633251][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  655.662984][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  655.671527][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  655.689479][T23520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  655.832150][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.835929][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  655.865714][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  655.894903][ T9744] Bluetooth: hci5: command 0x040f tx timeout
[  655.903830][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  655.921807][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  655.946149][T23520] device veth0_vlan entered promiscuous mode
[  655.957101][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  655.966119][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  655.979881][T23520] device veth1_vlan entered promiscuous mode
[  656.021792][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  656.032762][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  656.044921][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  656.056429][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  656.072062][T23520] device veth0_macvtap entered promiscuous mode
[  656.089010][T23520] device veth1_macvtap entered promiscuous mode
[  656.115863][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  656.127270][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.140825][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  656.154494][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.167154][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  656.179640][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.192159][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  656.204697][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.218061][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  656.231027][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.244855][T23520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.254907][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  656.268646][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  656.277363][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  656.289806][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  656.303624][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  656.319127][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.332419][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  656.344739][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.356427][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  656.368981][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.381679][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  656.393914][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.405788][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  656.418074][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.432443][T23520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.447525][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  656.459948][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  656.583875][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.600074][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.655877][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  656.701424][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.724236][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.773891][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  656.876343][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:02 executing program 5:
eventfd2(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x180}}, 0x0)
syz_open_procfs(0x0, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

02:57:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94)

02:57:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

02:57:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x7ffffffff000}])

02:57:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
r6 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

02:57:02 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x8000000000000003, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x80}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0)

[  657.019499][T23786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
02:57:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x7ffffffff000}])

[  657.186731][T23794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
02:57:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

02:57:02 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x8000000000000003, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x80}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0)

02:57:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

02:57:02 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/131, 0x20000443}], 0x1}}], 0x1, 0x0, 0x0)

02:57:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94)

[  658.240599][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.252293][T23820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
02:57:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "6096b6"})

02:57:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

02:57:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/131, 0x20000443}], 0x1}}], 0x1, 0x0, 0x0)

02:57:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
r6 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

02:57:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x100000000)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000140))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000d36000/0x4000)=nil, &(0x7f0000d36000/0x4000)=nil, 0x0, 0x0)

[  658.299175][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:03 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x8000000000000003, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x80}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14)
sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0)

[  658.448030][T23848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
02:57:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/131, 0x20000443}], 0x1}}], 0x1, 0x0, 0x0)

[  658.604313][T23860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
02:57:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "6096b6"})

02:57:03 executing program 5:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

02:57:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
r6 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0)

02:57:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x0)
pread64(r0, &(0x7f00000000c0)=""/97, 0x61, 0x0)
close(r0)
socket$inet6(0xa, 0x0, 0x0)

[  658.896981][T23876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
02:57:04 executing program 1:
syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev}, @address_reply}}}}, 0x0)

02:57:04 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/131, 0x20000443}], 0x1}}], 0x1, 0x0, 0x0)

02:57:04 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "6096b6"})

02:57:04 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@abs={0x1}, 0x6e)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e)

02:57:04 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_BT_SECURITY(r0, 0x107, 0xf, 0x0, 0x20000000)

02:57:04 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0})

[  659.263349][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:04 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "6096b6"})

02:57:04 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000240)="e2", 0x1}], 0x1}}], 0x400000000000274, 0x400c040)

02:57:04 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0})

[  660.305910][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.534342][ T9744] Bluetooth: hci0: command 0x0401 tx timeout
[  661.334334][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.342653][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.782192][  T205] device hsr_slave_0 left promiscuous mode
[  661.788851][  T205] device hsr_slave_1 left promiscuous mode
[  661.795990][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.803515][  T205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  661.817056][  T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.824918][  T205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.837074][  T205] device bridge_slave_1 left promiscuous mode
[  661.843316][  T205] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.855744][  T205] device bridge_slave_0 left promiscuous mode
[  661.862168][  T205] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.874509][  T205] device veth1_macvtap left promiscuous mode
[  661.880548][  T205] device veth0_macvtap left promiscuous mode
[  661.886703][  T205] device veth1_vlan left promiscuous mode
[  661.892449][  T205] device veth0_vlan left promiscuous mode
[  662.384094][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.632991][    T5] Bluetooth: hci0: command 0x0401 tx timeout
[  663.414035][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.373983][T11867] Bluetooth: hci5: command 0x0409 tx timeout
[  664.380118][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.453994][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.544203][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.693741][T21976] Bluetooth: hci0: command 0x0401 tx timeout
[  665.183793][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.503167][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.453547][T21976] Bluetooth: hci5: command 0x041b tx timeout
[  666.533823][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.604646][  T205] team0 (unregistering): Port device team_slave_1 removed
[  666.622225][  T205] team0 (unregistering): Port device team_slave_0 removed
[  666.635259][  T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.649110][  T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.726419][  T205] bond0 (unregistering): Released all slaves
[  666.784358][T23915] IPVS: ftp: loaded support on port[0] = 21
[  666.898645][T23915] chnl_net:caif_netlink_parms(): no params data found
[  666.982553][T23915] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.990344][T23915] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.001800][T23915] device bridge_slave_0 entered promiscuous mode
[  667.012391][T23915] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.022808][T23915] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.035652][T23915] device bridge_slave_1 entered promiscuous mode
[  667.059368][T23915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.071964][T23915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.116929][T23915] team0: Port device team_slave_0 added
[  667.126913][T23915] team0: Port device team_slave_1 added
[  667.147656][T23915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.155194][T23915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.182914][T23915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.196882][T23915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.203951][T23915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.229896][T23915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.261857][T23915] device hsr_slave_0 entered promiscuous mode
[  667.269278][T23915] device hsr_slave_1 entered promiscuous mode
[  667.276848][T23915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  667.286905][T23915] Cannot create hsr debugfs directory
[  667.399115][T23915] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.406288][T23915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.413699][T23915] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.421186][T23915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.430998][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.559210][T23915] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.594752][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.606734][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  667.619659][T21976] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.630799][T21976] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.650934][T23915] 8021q: adding VLAN 0 to HW filter on device team0
[  667.667462][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  667.676861][T21974] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.683998][T21974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.714437][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  667.722893][T21974] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.730031][T21974] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.757071][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  667.767983][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  667.794144][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  667.803271][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  667.815296][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  667.827290][T23915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  667.857762][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  667.869590][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  667.890682][T23915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.021093][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  668.030053][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  668.061971][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  668.071263][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  668.087856][T23915] device veth0_vlan entered promiscuous mode
[  668.096538][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  668.109553][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  668.129784][T23915] device veth1_vlan entered promiscuous mode
[  668.180365][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  668.192789][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  668.211438][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  668.221529][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  668.234983][T23915] device veth0_macvtap entered promiscuous mode
[  668.250377][T23915] device veth1_macvtap entered promiscuous mode
[  668.272654][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  668.284517][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.295320][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  668.307321][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.318335][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  668.329802][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.340861][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  668.362413][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.376192][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  668.387751][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.400836][T23915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  668.412024][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  668.431144][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  668.449268][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  668.461806][T21974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  668.483153][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  668.505817][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.533509][T21976] Bluetooth: hci5: command 0x040f tx timeout
[  668.545332][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  668.558967][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.570792][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  668.583477][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.595302][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  668.607818][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.628690][T23915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  668.632570][T21976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.651754][T23915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.674013][T23915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.681740][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  668.708023][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  668.888748][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  668.911989][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.971301][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  668.997144][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.031025][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.053995][T21976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  669.165474][T24157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  669.208662][T24157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
02:57:14 executing program 5:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ftruncate(r0, 0x208200)
r3 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000800)=""/141, 0x8d}], 0x1, 0x8d000000, 0x0)

02:57:14 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_BT_SECURITY(r0, 0x107, 0xf, 0x0, 0x20000000)

02:57:14 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x790006)

02:57:14 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000200)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @remote}}}, 0x108)

02:57:14 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0})

02:57:14 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, 0x0)

02:57:14 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0xffffff8e, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000140)="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", 0x218, 0x8000, 0x0, 0x0)
close(r1)

02:57:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x31, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x5c}}, 0x0)

02:57:14 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0})

02:57:14 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x1e, 0x8b73102c764253c5, 0x0, 0x0, "", [@generic="01"]}, 0x14}], 0x1}, 0x0)

02:57:14 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_BT_SECURITY(r0, 0x107, 0xf, 0x0, 0x20000000)

[  669.637292][T24187] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'.
[  669.673967][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:14 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_BT_SECURITY(r0, 0x107, 0xf, 0x0, 0x20000000)

02:57:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

02:57:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'veth1_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000024006965980900000000000000002000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000800900010067726564000000004c0002000800050000fffe000800050000000000380003"], 0x7c}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0)

[  669.798459][T24195] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'.
02:57:15 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x1e, 0x8b73102c764253c5, 0x0, 0x0, "", [@generic="01"]}, 0x14}], 0x1}, 0x0)

02:57:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0)

02:57:15 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

02:57:15 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000001c0)=0xdf8, 0x4)

02:57:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0x87}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xffff}}}, 0x24}}, 0x0)

02:57:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

02:57:15 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00')
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
read$FUSE(r0, 0x0, 0x0)

02:57:15 executing program 3:
r0 = syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1002, 0xffff}})

02:57:15 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8003}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800098024000000", 0x24)

02:57:15 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x1e, 0x8b73102c764253c5, 0x0, 0x0, "", [@generic="01"]}, 0x14}], 0x1}, 0x0)

[  670.454962][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:15 executing program 2:
syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1005, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="6873717307000000911d675f000010000000000004001400d014000004", 0x1d}], 0x0, &(0x7f0000000240))

02:57:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

02:57:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0)

02:57:15 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
write$char_usb(r0, 0x0, 0x0)

[  670.613224][T21974] Bluetooth: hci5: command 0x0419 tx timeout
[  670.631118][T24235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  670.702869][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:16 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x1e, 0x8b73102c764253c5, 0x0, 0x0, "", [@generic="01"]}, 0x14}], 0x1}, 0x0)

[  670.764275][T24236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:16 executing program 2:
r0 = fanotify_init(0x0, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x9, 0x48000020, r1, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1)
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)

02:57:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000b67000), &(0x7f0000000140)=0x4)

02:57:16 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000001840)=0xfffffffc)

02:57:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

02:57:16 executing program 0:
clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0)

02:57:16 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10)
getdents(0xffffffffffffffff, 0x0, 0x0)

02:57:16 executing program 4:
r0 = epoll_create1(0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa0004007})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0xe0000007})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

02:57:16 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000001840)=0xfffffffc)

02:57:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

02:57:16 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x0, 0x0, 'client1\x00', 0x0, "08609538db0d012b", "b71bbdb11a04944f53902e9354be9137038f06adcba0645eb20bbeb849b70e46"})

02:57:16 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001340)={'gre0\x00', &(0x7f00000012c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00008059"]})

02:57:16 executing program 4:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))

02:57:16 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000001840)=0xfffffffc)

02:57:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

02:57:16 executing program 2:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote})
r1 = socket$kcm(0x2, 0xa, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast})

02:57:16 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0xd0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'syz_tun\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5101a0d514ae77b72fe48f8b98e7a68fc87f21b6053703cfcd6cfdba5d4f"}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)

02:57:16 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000001840)=0xfffffffc)

02:57:16 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x36, 'v'}], 0x18}, 0x0)
r1 = socket$kcm(0x11, 0x0, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

02:57:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32], 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)

02:57:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

02:57:17 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x36, 'v'}], 0x18}, 0x0)
r1 = socket$kcm(0x11, 0x0, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

02:57:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000000)={0x94, 0x0, [0x176, 0x0, 0x11fb, 0x0, 0x400000b7]})

[  671.759506][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.943348][T24321] device vlan0 entered promiscuous mode
[  671.971503][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
02:57:17 executing program 0:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0})
clock_settime(0x0, &(0x7f0000000080)={r0})

02:57:17 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x36, 'v'}], 0x18}, 0x0)
r1 = socket$kcm(0x11, 0x0, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

02:57:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r3}]}}}]}, 0x38}}, 0x0)

02:57:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

02:57:17 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x36, 'v'}], 0x18}, 0x0)
r1 = socket$kcm(0x11, 0x0, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

02:57:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000000)={0x94, 0x0, [0x174, 0x0, 0x11fb, 0x0, 0x40000003]})

02:57:17 executing program 0:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0})
clock_settime(0x0, &(0x7f0000000080)={r0})

02:57:17 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0)

02:57:17 executing program 3:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

02:57:17 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0)

[  672.783405][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:18 executing program 0:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0})
clock_settime(0x0, &(0x7f0000000080)={r0})

02:57:18 executing program 5:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

02:57:18 executing program 1:
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x1ab502)
write$qrtrtun(r0, &(0x7f00000005c0)="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", 0xe84)

02:57:18 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0, 0x0)

[  672.973712][T24381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
02:57:18 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x41)
r1 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="8f", 0x1}], 0x1, 0xec24, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
fadvise64(r2, 0x0, 0x0, 0x4)

[  673.165195][T24393] encrypted_key: key trusted:em1 not found
[  673.170177][T24393] encrypted_key: keyword 'new' not allowed when called from .update method
02:57:18 executing program 0:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0})
clock_settime(0x0, &(0x7f0000000080)={r0})

[  673.261126][T24396] overlayfs: filesystem on './file0' not supported as upperdir
02:57:18 executing program 5:
msgctl$IPC_RMID(0x0, 0x300)

02:57:18 executing program 3:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

02:57:18 executing program 1:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

02:57:18 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f00000003c0)={'wlan0\x00'})

02:57:18 executing program 5:
prctl$PR_SET_MM_AUXV(0x23, 0xd, &(0x7f00000001c0)="ad", 0x1)

[  673.499419][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.633232][T24381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
[  673.814042][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.844329][T24410] overlayfs: conflicting lowerdir path
02:57:19 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0)

02:57:19 executing program 0:
keyctl$update(0x2, 0x0, &(0x7f0000000300)="ed1419fbf4", 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'geneve1\x00', {0x2, 0x0, @empty}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:57:19 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0, 0x0)

02:57:19 executing program 5:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=unix,', {[{@cache_none='cache=none'}]}})

02:57:19 executing program 1:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

02:57:19 executing program 3:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  674.339317][T24437] 9pnet: p9_fd_create_unix (24437): problem connecting socket: ./file0: -111
[  674.484530][T24443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
02:57:19 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0, 0x0)

02:57:19 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@private2, @in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x8}, 0x0)

02:57:19 executing program 0:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', 'user:'}, 0x2e, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

[  674.618343][T24432] overlayfs: conflicting lowerdir path
[  674.772469][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.776272][T24454] encrypted_key: keyword 'load' not allowed when called from .update method
02:57:20 executing program 3:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

02:57:20 executing program 1:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x101200, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000100000020000000"], 0x5c, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2a0000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x0, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x3004c00c)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)})
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  674.852265][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.869367][T24454] encrypted_key: keyword 'load' not allowed when called from .update method
02:57:20 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x1, 0x101, 0x7f, 0x0, 0xffffffffffffffff, 0xde, [], 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x40)

[  675.288302][T24463] overlayfs: conflicting lowerdir path
02:57:20 executing program 0:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', 'user:'}, 0x2e, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

02:57:20 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0, 0x0)

02:57:20 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0)

02:57:20 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r0, 0x4bfa, 0x0)

02:57:20 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1771f6a4fd0)

[  675.526664][T24475] encrypted_key: keyword 'load' not allowed when called from .update method
02:57:20 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8947, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}})

[  675.592814][T24477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
02:57:20 executing program 0:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', 'user:'}, 0x2e, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

02:57:21 executing program 3:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0)
request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xe7\x92\xf9\xb2\xec]2\xf6/%\xd6,\x8a\xdc9\x00\x00\x00\x00\x00\x00\x10\x00\a\x00@\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

02:57:21 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  675.760406][T24486] encrypted_key: keyword 'load' not allowed when called from .update method
02:57:21 executing program 0:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', 'user:'}, 0x2e, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

02:57:21 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1771f6a4fd0)

[  675.901878][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.933586][T24496] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
02:57:21 executing program 3:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0)
request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xe7\x92\xf9\xb2\xec]2\xf6/%\xd6,\x8a\xdc9\x00\x00\x00\x00\x00\x00\x10\x00\a\x00@\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

[  675.943592][T24497] encrypted_key: keyword 'load' not allowed when called from .update method
02:57:21 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8}]}, 0x64}}, 0x0)

02:57:21 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

02:57:21 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

02:57:21 executing program 3:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0)
request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xe7\x92\xf9\xb2\xec]2\xf6/%\xd6,\x8a\xdc9\x00\x00\x00\x00\x00\x00\x10\x00\a\x00@\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

02:57:21 executing program 5:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r0, &(0x7f0000001340), 0x10)

02:57:21 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1771f6a4fd0)

02:57:21 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000005500)=[{{&(0x7f0000001440)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0)

02:57:21 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

02:57:21 executing program 3:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0)
request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xe7\x92\xf9\xb2\xec]2\xf6/%\xd6,\x8a\xdc9\x00\x00\x00\x00\x00\x00\x10\x00\a\x00@\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

[  676.428464][T24517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
[  676.531400][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:21 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

02:57:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000ff030000000000f50000", @ANYRES32=r3, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x0, 0x8}}}, 0x24}}, 0x0)

02:57:21 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x66, 0x23, 0xf, 0x40, 0x17ef, 0x7203, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x47, 0x7c, 0x34}}]}}]}}, 0x0)

[  676.942281][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.980167][T24537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  677.007535][T24541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
02:57:22 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1771f6a4fd0)

02:57:22 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

02:57:22 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

02:57:22 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x41, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'trylock', ' ', 'none'}, 0xd)

[  677.120905][    T5] usb 6-1: new high-speed USB device number 11 using dummy_hcd
02:57:22 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000008480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000000000f1"], 0x10}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)

02:57:22 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x13}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0)

02:57:22 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

[  677.480803][    T5] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd
[  677.489886][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
02:57:22 executing program 2:
io_setup(0x100, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x2, &(0x7f00000013c0)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}])

02:57:22 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0xeb, 0xb7, 0x40, 0x2040, 0x4901, 0x1d63, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa, 0x8f, 0x11}}]}}]}}, 0x0)

02:57:22 executing program 4:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000002c0))

[  677.571367][    T5] usb 6-1: config 0 descriptor??
02:57:22 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x13}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0)

[  677.874519][    T5] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  677.908351][    T5] asix: probe of 6-1:0.0 failed with error -71
[  677.928418][    T5] usb 6-1: USB disconnect, device number 11
[  677.981032][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.610405][    T5] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  678.969844][    T5] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd
[  678.978936][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.996900][    T5] usb 6-1: config 0 descriptor??
[  679.018154][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)

02:57:24 executing program 2:
io_setup(0x100, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x2, &(0x7f00000013c0)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}])

02:57:24 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

02:57:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x200, 0x0, 0x7}]})

02:57:24 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x13}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0)

02:57:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fsetxattr(r2, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0, 0x0)

[  679.259621][    T5] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  679.312258][    T5] asix: probe of 6-1:0.0 failed with error -71
[  679.372221][    T5] usb 6-1: USB disconnect, device number 12
02:57:24 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9a, 0x2a, 0x6c, 0x40, 0x483, 0x1234, 0xf673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x85, 0xe, 0x87}}]}}]}}, 0x0)

02:57:24 executing program 2:
io_setup(0x100, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x2, &(0x7f00000013c0)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}])

02:57:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)

02:57:24 executing program 5:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200000}, 0x18)

[  679.573488][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x200, 0x0, 0x7}]})

02:57:25 executing program 2:
io_setup(0x100, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x2, &(0x7f00000013c0)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}])

[  679.899265][    T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd
02:57:25 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000014da2108ab12a190eb1e00009b010902240001000000000904410017ff5d010009050f1f010000000009058303"], 0x0)

02:57:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)

02:57:25 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x13}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0)

02:57:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x200, 0x0, 0x7}]})

[  680.049699][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x44, r1, 0xa21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x6, 0x3, "dae6"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x44}}, 0x0)

02:57:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)

[  680.359848][ T9744] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  680.419931][    T7] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=f6.73
[  680.438970][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.447555][    T7] usb 1-1: Product: syz
[  680.469125][    T7] usb 1-1: Manufacturer: syz
[  680.473812][    T7] usb 1-1: SerialNumber: syz
[  680.487665][    T7] usb 1-1: config 0 descriptor??
[  680.599202][ T9744] usb 6-1: Using ep0 maxpacket: 8
[  680.719264][ T9744] usb 6-1: config 0 has an invalid interface number: 65 but max is 0
[  680.745871][ T9744] usb 6-1: config 0 has no interface number 0
[  680.799031][ T9744] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  680.812626][    T7] usb_8dev 1-1:0.0 can0: sending command message failed
[  680.821745][    T7] usb_8dev 1-1:0.0 can0: can't get firmware version
[  680.856973][ T9744] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  680.890657][ T9744] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  680.915200][ T9744] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  680.982036][    T7] usb_8dev: probe of 1-1:0.0 failed with error -22
[  680.991846][    T7] usb 1-1: USB disconnect, device number 19
[  681.009456][ T9744] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  681.018533][ T9744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=155
[  681.037571][ T9744] usb 6-1: SerialNumber: syz
[  681.048000][ T9744] usb 6-1: config 0 descriptor??
[  681.090679][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.106891][ T9744] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input29
[  681.304553][ T9744] usb 6-1: USB disconnect, device number 13
[  681.318579][    C0] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19
[  681.337806][ T9744] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  681.538483][    T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  682.058228][    T7] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=f6.73
[  682.067276][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.081981][    T7] usb 1-1: Product: syz
[  682.086162][    T7] usb 1-1: Manufacturer: syz
[  682.092401][    T7] usb 1-1: SerialNumber: syz
[  682.098260][T21974] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  682.108892][    T7] usb 1-1: config 0 descriptor??
[  682.130322][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:27 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9a, 0x2a, 0x6c, 0x40, 0x483, 0x1234, 0xf673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x85, 0xe, 0x87}}]}}]}}, 0x0)

02:57:27 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1}])
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f0000000380)="ae4c4c3e6a1843d60c6d2cfe9ed46c1eff57bc4aa9f8074e0a7b2877037485206710626ed10876078b4221ffaef9bf2c22bafb627ba4654baa253362ad3a199186b5eb059c4f755a93b8a573102e1a3c15b32101d6d0d077dca3fe15b2d4d2da3d0adf6cf6aee0c5"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

02:57:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x200, 0x0, 0x7}]})

02:57:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)

02:57:27 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x0, 0xd, "6e472d959c008a6a27fb4932bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  682.378003][T21974] usb 6-1: Using ep0 maxpacket: 8
[  682.394044][    T7] usb_8dev 1-1:0.0 can0: sending command message failed
[  682.432311][    T7] usb_8dev 1-1:0.0 can0: can't get firmware version
[  682.463645][T24744] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
02:57:27 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1}])
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f0000000380)="ae4c4c3e6a1843d60c6d2cfe9ed46c1eff57bc4aa9f8074e0a7b2877037485206710626ed10876078b4221ffaef9bf2c22bafb627ba4654baa253362ad3a199186b5eb059c4f755a93b8a573102e1a3c15b32101d6d0d077dca3fe15b2d4d2da3d0adf6cf6aee0c5"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

[  682.538656][T21974] usb 6-1: config 0 has an invalid interface number: 65 but max is 0
[  682.546793][T21974] usb 6-1: config 0 has no interface number 0
[  682.568593][    T7] usb_8dev: probe of 1-1:0.0 failed with error -22
[  682.591701][T21974] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  682.617978][    T7] usb 1-1: USB disconnect, device number 20
[  682.646279][T21974] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  682.670708][T21974] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  682.699993][T21974] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  682.721520][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.808296][T21974] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  682.818677][T21974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=155
[  682.826872][T21974] usb 6-1: SerialNumber: syz
[  682.859129][T21974] usb 6-1: config 0 descriptor??
[  682.887920][ T9809] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  682.907190][T21974] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input30
[  683.027832][    T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd
02:57:28 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0)
io_setup(0x7, &(0x7f00000000c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

02:57:28 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1}])
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f0000000380)="ae4c4c3e6a1843d60c6d2cfe9ed46c1eff57bc4aa9f8074e0a7b2877037485206710626ed10876078b4221ffaef9bf2c22bafb627ba4654baa253362ad3a199186b5eb059c4f755a93b8a573102e1a3c15b32101d6d0d077dca3fe15b2d4d2da3d0adf6cf6aee0c5"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

[  683.128967][ T9542] usb 6-1: USB disconnect, device number 14
[  683.147579][    C1] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19
[  683.167789][ T9809] usb 4-1: Using ep0 maxpacket: 8
02:57:28 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

02:57:28 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000014da2108ab12a190eb1e00009b010902240001000000000904410017ff5d010009050f1f010000000009058303"], 0x0)

[  683.178316][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.219088][ T9542] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
02:57:28 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

[  683.287759][ T9809] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e
[  683.296855][ T9809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
02:57:28 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_journal_start\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)

[  683.344133][ T9809] usb 4-1: config 0 descriptor??
[  683.390315][ T9809] cp210x 4-1:0.0: cp210x converter detected
[  683.557714][    T7] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=f6.73
[  683.566794][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.610171][    T7] usb 1-1: Product: syz
[  683.619042][    T7] usb 1-1: Manufacturer: syz
[  683.630551][    T7] usb 1-1: SerialNumber: syz
[  683.656839][    T7] usb 1-1: config 0 descriptor??
[  683.737367][ T9542] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  683.972697][    T7] usb_8dev 1-1:0.0 can0: sending command message failed
[  683.981400][    T7] usb_8dev 1-1:0.0 can0: can't get firmware version
[  683.995125][ T9542] usb 6-1: Using ep0 maxpacket: 8
[  684.039063][    T7] usb_8dev: probe of 1-1:0.0 failed with error -22
[  684.054644][    T7] usb 1-1: USB disconnect, device number 21
[  684.067901][ T9809] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[  684.074994][ T9809] cp210x: probe of ttyUSB0 failed with error -71
[  684.098573][ T9809] usb 4-1: USB disconnect, device number 10
[  684.121178][ T9809] cp210x 4-1:0.0: device disconnected
[  684.137490][ T9542] usb 6-1: config 0 has an invalid interface number: 65 but max is 0
[  684.158956][ T9542] usb 6-1: config 0 has no interface number 0
[  684.165112][ T9542] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  684.183743][ T9542] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  684.195370][ T9542] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  684.229006][ T9542] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  684.249687][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.337134][ T9542] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  684.346214][ T9542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=155
[  684.358970][ T9542] usb 6-1: SerialNumber: syz
[  684.365407][ T9542] usb 6-1: config 0 descriptor??
[  684.395657][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.430987][ T9542] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input31
02:57:29 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9a, 0x2a, 0x6c, 0x40, 0x483, 0x1234, 0xf673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x85, 0xe, 0x87}}]}}]}}, 0x0)

02:57:29 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1}])
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f0000000380)="ae4c4c3e6a1843d60c6d2cfe9ed46c1eff57bc4aa9f8074e0a7b2877037485206710626ed10876078b4221ffaef9bf2c22bafb627ba4654baa253362ad3a199186b5eb059c4f755a93b8a573102e1a3c15b32101d6d0d077dca3fe15b2d4d2da3d0adf6cf6aee0c5"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

02:57:29 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

02:57:29 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x7000000, 0x0)

[  684.760133][ T9809] usb 6-1: USB disconnect, device number 15
[  684.776922][ T9809] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  684.826794][ T9542] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  684.986813][T21974] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  685.086684][ T9542] usb 4-1: Using ep0 maxpacket: 8
[  685.237528][ T9542] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e
[  685.246945][ T9542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.270313][ T9542] usb 4-1: config 0 descriptor??
[  685.318529][ T9542] cp210x 4-1:0.0: cp210x converter detected
[  685.327277][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:30 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x0, 0xd, "6e472d959c008a6a27fb4932bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

02:57:30 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x3f}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

02:57:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

02:57:30 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x57, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}}, 0x0)

02:57:30 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000014da2108ab12a190eb1e00009b010902240001000000000904410017ff5d010009050f1f010000000009058303"], 0x0)

[  685.476722][ T9542] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  685.484472][ T9542] cp210x 4-1:0.0: querying part number failed
[  685.538519][ T9542] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[  685.577537][ T9542] cp210x: probe of ttyUSB0 failed with error -71
[  685.587451][T21974] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=f6.73
[  685.614494][T21974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
02:57:30 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000040), 0x1}, 0x20)

02:57:30 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}]}, 0x28}}, 0x0)

[  685.638295][ T9542] usb 4-1: USB disconnect, device number 11
[  685.653887][T21974] usb 1-1: Product: syz
[  685.666435][T21974] usb 1-1: Manufacturer: syz
[  685.672082][ T9542] cp210x 4-1:0.0: device disconnected
[  685.681293][T21974] usb 1-1: SerialNumber: syz
02:57:30 executing program 4:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb27203, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='0', 0x1}, {&(0x7f0000000300)="8d", 0x1}], 0x2)

[  685.708008][T21974] usb 1-1: config 0 descriptor??
[  685.729307][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.813202][T24928] vcan0: MTU too low for tipc bearer
[  685.828740][T24928] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  685.856378][T11862] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  686.000170][T21974] usb_8dev 1-1:0.0 can0: sending command message failed
[  686.013406][T21974] usb_8dev 1-1:0.0 can0: can't get firmware version
[  686.066514][ T9542] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  686.096586][T21974] usb_8dev: probe of 1-1:0.0 failed with error -22
[  686.106159][T11862] usb 6-1: Using ep0 maxpacket: 8
[  686.122019][T21974] usb 1-1: USB disconnect, device number 22
[  686.226522][T11862] usb 6-1: config 0 has an invalid interface number: 65 but max is 0
[  686.234633][T11862] usb 6-1: config 0 has no interface number 0
[  686.244413][T11862] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  686.266294][T11862] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  686.295509][T11862] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  686.323202][T11862] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  686.350994][ T9542] usb 4-1: Using ep0 maxpacket: 8
[  686.403693][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.417237][T11862] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  686.431730][T11862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=155
[  686.441166][T11862] usb 6-1: SerialNumber: syz
[  686.456447][T11862] usb 6-1: config 0 descriptor??
[  686.505347][T11862] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input32
[  686.536357][ T9542] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e
02:57:31 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9a, 0x2a, 0x6c, 0x40, 0x483, 0x1234, 0xf673, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x85, 0xe, 0x87}}]}}]}}, 0x0)

[  686.555000][ T9542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.580276][ T9542] usb 4-1: config 0 descriptor??
02:57:31 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

02:57:31 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

02:57:31 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa12, {{0x2, 0x2, 0x0, @private1}, {0x2, 0x0, 0x0, @loopback}, r3}}, 0x48)

[  686.630286][ T9542] cp210x 4-1:0.0: cp210x converter detected
[  686.799165][ T9809] usb 6-1: USB disconnect, device number 16
[  686.823747][ T9809] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  687.015940][T11862] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  687.385764][ T9542] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[  687.394165][ T9542] cp210x: probe of ttyUSB0 failed with error -71
[  687.431639][ T9542] usb 4-1: USB disconnect, device number 12
[  687.452058][ T9542] cp210x 4-1:0.0: device disconnected
[  687.489758][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.535680][T11862] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=f6.73
[  687.546799][T11862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.558032][T11862] usb 1-1: Product: syz
[  687.562291][T11862] usb 1-1: Manufacturer: syz
[  687.568800][T11862] usb 1-1: SerialNumber: syz
[  687.580192][T11862] usb 1-1: config 0 descriptor??
[  687.888959][T11862] usb_8dev 1-1:0.0 can0: sending command message failed
[  687.899072][T11862] usb_8dev 1-1:0.0 can0: can't get firmware version
02:57:33 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x0, 0xd, "6e472d959c008a6a27fb4932bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

02:57:33 executing program 2:
syz_usb_connect(0x0, 0x38, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004beb6c408d0e0400f05e2202030109022600010000000009040000000e0100000c2403010102000090"], 0x0)

02:57:33 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

02:57:33 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30)

02:57:33 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000014da2108ab12a190eb1e00009b010902240001000000000904410017ff5d010009050f1f010000000009058303"], 0x0)

[  687.985409][T11862] usb_8dev: probe of 1-1:0.0 failed with error -22
[  688.007168][T11862] usb 1-1: USB disconnect, device number 23
02:57:33 executing program 1:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @bcast]})

02:57:33 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

02:57:33 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
get_mempolicy(&(0x7f0000000380), 0x0, 0x0, &(0x7f0000000000/0x1000)=nil, 0x2)

[  688.325384][ T9542] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  688.355057][ T9744] usb 4-1: new high-speed USB device number 13 using dummy_hcd
02:57:33 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

02:57:33 executing program 1:
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)

02:57:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid=[0x1, 0x1, 0x21], 0x6, 0x0)

[  688.525475][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.575012][ T9542] usb 6-1: Using ep0 maxpacket: 8
02:57:33 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
pipe2(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)

[  688.595823][ T9744] usb 4-1: Using ep0 maxpacket: 8
[  688.707390][ T9542] usb 6-1: config 0 has an invalid interface number: 65 but max is 0
[  688.715556][ T9744] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e
[  688.715579][ T9744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.751776][ T9542] usb 6-1: config 0 has no interface number 0
[  688.770346][ T9542] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  688.773781][ T9744] usb 4-1: config 0 descriptor??
[  688.803250][ T9542] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  688.815016][ T9542] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  688.829350][ T9542] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  688.896071][ T9744] cp210x 4-1:0.0: cp210x converter detected
[  688.914981][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.945407][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.955653][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  689.002502][ T9542] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[  689.016692][ T9542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=155
[  689.041226][ T9542] usb 6-1: SerialNumber: syz
[  689.048884][ T9542] usb 6-1: config 0 descriptor??
[  689.099601][ T9542] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input33
[  689.305453][T11862] usb 6-1: USB disconnect, device number 17
[  689.334785][T11862] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  689.589698][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.598189][ T9744] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[  689.621513][ T9744] cp210x: probe of ttyUSB0 failed with error -71
[  689.630633][ T9744] usb 4-1: USB disconnect, device number 13
[  689.640381][ T9744] cp210x 4-1:0.0: device disconnected
02:57:35 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x0, 0xd, "6e472d959c008a6a27fb4932bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

02:57:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x6, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0}, 0x41}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

02:57:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', 0x0, 0x0, 0x0, &(0x7f0000000ac0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@uid_lt={'uid<'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x36, 0x31, 0x33, 0x38, 0x64, 0x38], 0x2d, [0x0, 0x33, 0x31, 0x30], 0x2d, [0x34, 0x0, 0x0, 0x58], 0x2d, [0x0, 0x39, 0x64], 0x2d, [0x38, 0x33, 0x0, 0x66, 0x29f693b54064f440, 0x38, 0x33, 0x64]}}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 's0cqrity.ima\x00'}}]}})
rmdir(&(0x7f00000000c0)='./bus/file0\x00')

02:57:35 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_ROPEN(r1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

02:57:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid=[0x1, 0x1, 0x21], 0x6, 0x0)

02:57:35 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)

[  690.211826][T25128] Unknown ioctl 1075883590
[  690.225241][T25128] Unknown ioctl 1075883590
[  690.242461][T25128] Unknown ioctl 1075883590
[  690.256841][T25128] Unknown ioctl 1075883590
[  690.263891][T25128] Unknown ioctl 1075883590
[  690.278821][T25128] Unknown ioctl 1075883590
[  690.290461][T25128] Unknown ioctl 1075883590
[  690.298761][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.300422][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.308916][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.325168][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.334003][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.340942][T25128] Unknown ioctl 1075883590
[  690.343038][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.356141][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.365368][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.370632][T25128] Unknown ioctl 1075883590
[  690.373963][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.386202][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.386751][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.402899][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.412196][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.420558][T25128] Unknown ioctl 1075883590
[  690.421168][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.434582][T25129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.479919][T25128] Unknown ioctl 1075883590
02:57:35 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@var={0x5, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000002340)=""/4090, 0x49, 0xffa, 0x41}, 0x20)

[  690.504089][ T9744] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  690.543336][T25128] Unknown ioctl 1075883590
[  690.571504][T25128] Unknown ioctl 1075883590
[  690.589383][T25128] Unknown ioctl 1075883590
02:57:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid=[0x1, 0x1, 0x21], 0x6, 0x0)

[  690.628815][T25128] Unknown ioctl 1075883590
[  690.654196][T25128] Unknown ioctl 1075883590
[  690.671328][T25128] Unknown ioctl 1075883590
[  690.689383][T25128] Unknown ioctl 1075883590
[  690.694234][T25127] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  690.731357][T25128] Unknown ioctl 1075883590
[  690.743844][ T9744] usb 4-1: Using ep0 maxpacket: 8
[  690.744940][T25128] Unknown ioctl 1075883590
02:57:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_NET_NS_FD={0x8}]}, 0x50}}, 0x0)

[  690.772710][T25128] Unknown ioctl 1075883590
[  690.780934][T25128] Unknown ioctl 1075883590
[  690.790430][T25128] Unknown ioctl 1075883590
02:57:36 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_x_sec_ctx={0x1}]}, 0x58}}, 0x0)

[  690.825342][T25128] Unknown ioctl 1075883590
[  690.839811][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.865072][ T9744] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e
[  690.867412][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.884474][ T9744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.896129][T25128] Unknown ioctl 1075883590
[  690.915939][ T9744] usb 4-1: config 0 descriptor??
02:57:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid=[0x1, 0x1, 0x21], 0x6, 0x0)

02:57:36 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

[  690.975092][ T9744] cp210x 4-1:0.0: cp210x converter detected
[  691.140960][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.152493][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.653553][ T9744] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71
[  691.660664][ T9744] cp210x: probe of ttyUSB0 failed with error -71
[  691.670661][ T9744] usb 4-1: USB disconnect, device number 14
[  691.688020][ T9744] cp210x 4-1:0.0: device disconnected
02:57:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x6, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0}, 0x41}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

02:57:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={<r3=>r1}, &(0x7f0000000400)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x82, &(0x7f0000000280)={r3}, 0x8)

02:57:37 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, 0x0, 0x0)

02:57:37 executing program 0:
syz_usb_disconnect(0xffffffffffffffff)

02:57:37 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x1f, 0x1, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc10c5541, &(0x7f0000000140)={r1})

02:57:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000001080)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)

02:57:37 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
close(r0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x101242, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='\xe4\xff\xff\xff')
write$cgroup_type(r2, 0x0, 0x0)

02:57:37 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000024000b0f00009d000000000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff"], 0x90}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

02:57:37 executing program 5:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyprintk\x00', 0x4800, 0x0)

02:57:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000001080)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)

[  692.436609][T25200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x6, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0}, 0x41}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

[  692.504003][T25200] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:37 executing program 5:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyprintk\x00', 0x4800, 0x0)

02:57:37 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000001080)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)

[  692.563791][T25207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  692.584856][T25200] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:37 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000180)=0x8)

02:57:37 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000024000b0f00009d000000000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff"], 0x90}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

[  692.851731][T25224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  692.907166][T25224] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:38 executing program 2:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)

02:57:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x6, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0}, 0x41}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0)

02:57:38 executing program 0:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'sha3-256\x00'}}}, 0xe0}}, 0x0)

02:57:38 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000001080)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)

02:57:38 executing program 5:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyprintk\x00', 0x4800, 0x0)

02:57:38 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000024000b0f00009d000000000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff"], 0x90}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

[  693.211371][T25242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000002cc0)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x10c}}, 0x0)

02:57:38 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xee01}})

02:57:38 executing program 5:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyprintk\x00', 0x4800, 0x0)

[  693.399113][T25246] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000240)=0x76, 0x4)
writev(r2, &(0x7f0000001380)=[{&(0x7f0000000000)="d2", 0x1}], 0x1)
recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

[  693.444942][T25249] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:38 executing program 2:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)

02:57:38 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000024000b0f00009d000000000000000000", @ANYRES32=r4, @ANYBLOB="0000ffff"], 0x90}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

02:57:38 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r1, &(0x7f00000018c0)=[{&(0x7f0000000300)="257b849ac8adaab1382925d39f0a0fefbfc72581", 0x14}, {&(0x7f0000000c80)="9bff1f1cff1f046593c9e7037a5a74e2cf5f1ff1", 0x14}], 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

02:57:38 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r1, 0x1, 0x20, r2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[  693.663368][T25269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
02:57:38 executing program 5:
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
openat$btrfs_control(0xffffff9c, 0x0, 0x0, 0x0)

02:57:39 executing program 1:
syz_init_net_socket$ax25(0x3, 0x5, 0x8)

[  693.780254][   T34] audit: type=1804 audit(1605581859.009:92): pid=25279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir311168502/syzkaller.PPigR8/523/bus" dev="sda1" ino=16384 res=1 errno=0
02:57:39 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r1, &(0x7f00000018c0)=[{&(0x7f0000000300)="257b849ac8adaab1382925d39f0a0fefbfc72581", 0x14}, {&(0x7f0000000c80)="9bff1f1cff1f046593c9e7037a5a74e2cf5f1ff1", 0x14}], 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

02:57:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040))
r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
fchown(r1, 0xee00, 0x0)
fchown(r0, 0xee00, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000001980)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)

02:57:39 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r1, 0x1, 0x20, r2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:57:39 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000080)={'caif0\x00', @ifru_names})

02:57:39 executing program 2:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)

02:57:39 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000058000500d25a80648c63940d0a00fc000e0002400200a06d053582c137153e37040001800300d1bd0000", 0x2e}], 0x1}, 0x0)

[  694.123992][T25292] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  694.136062][   T34] audit: type=1804 audit(1605581859.370:93): pid=25298 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir311168502/syzkaller.PPigR8/524/bus" dev="sda1" ino=16291 res=1 errno=0
02:57:39 executing program 5:
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
openat$btrfs_control(0xffffff9c, 0x0, 0x0, 0x0)

[  694.212982][T25292] EXT4-fs (loop4): re-mounted. Opts: 
[  694.254750][T25304] EXT4-fs (loop4): re-mounted. Opts: 
02:57:39 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r1, &(0x7f00000018c0)=[{&(0x7f0000000300)="257b849ac8adaab1382925d39f0a0fefbfc72581", 0x14}, {&(0x7f0000000c80)="9bff1f1cff1f046593c9e7037a5a74e2cf5f1ff1", 0x14}], 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

02:57:39 executing program 2:
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)

02:57:39 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r1, 0x1, 0x20, r2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[  694.315778][T25304] EXT4-fs error (device loop4): ext4_mb_generate_buddy:802: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters
[  694.373988][T25313] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  694.411556][T25313] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  694.415909][T25304] Quota error (device loop4): write_blk: dquota write failed
[  694.488513][T25304] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
02:57:39 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(r1, &(0x7f00000018c0)=[{&(0x7f0000000300)="257b849ac8adaab1382925d39f0a0fefbfc72581", 0x14}, {&(0x7f0000000c80)="9bff1f1cff1f046593c9e7037a5a74e2cf5f1ff1", 0x14}], 0x2, 0x0)
close(r2)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

02:57:39 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000058000500d25a80648c63940d0a00fc000e0002400200a06d053582c137153e37040001800300d1bd0000", 0x2e}], 0x1}, 0x0)

02:57:39 executing program 5:
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
openat$btrfs_control(0xffffff9c, 0x0, 0x0, 0x0)

02:57:39 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040))
r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
fchown(r1, 0xee00, 0x0)
fchown(r0, 0xee00, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000001980)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)

[  694.618759][   T34] audit: type=1804 audit(1605581859.850:94): pid=25321 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir311168502/syzkaller.PPigR8/525/bus" dev="sda1" ino=16019 res=1 errno=0
02:57:39 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setreuid(0xee00, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
r3 = getuid()
setreuid(0xee00, r3)

02:57:39 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
fanotify_mark(r1, 0x1, 0x20, r2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[  694.706174][T25325] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  694.748922][T25325] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
02:57:40 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000058000500d25a80648c63940d0a00fc000e0002400200a06d053582c137153e37040001800300d1bd0000", 0x2e}], 0x1}, 0x0)

02:57:40 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0x1c, 0x148, 0x120, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'macvtap0\x00', {0x0, 0x0, 0x0, 0x0, 0x4c000000, 0xec, 0x7}}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

[  695.001485][   T34] audit: type=1804 audit(1605581860.230:95): pid=25332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir311168502/syzkaller.PPigR8/526/bus" dev="sda1" ino=16376 res=1 errno=0
02:57:40 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, r0, 0x25}, 0x14)

[  695.045187][T25337] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
02:57:40 executing program 5:
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
openat$btrfs_control(0xffffff9c, 0x0, 0x0, 0x0)

[  695.092632][T25337] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  695.113684][T25341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
02:57:40 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00')
lseek(r2, 0x680000, 0x0)

[  695.136963][T25345] xt_hashlimit: max too large, truncated to 1048576
[  695.148383][T25341] EXT4-fs (loop4): re-mounted. Opts: 
[  695.182918][T25345] xt_hashlimit: overflow, try lower: 0/0
02:57:40 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000058000500d25a80648c63940d0a00fc000e0002400200a06d053582c137153e37040001800300d1bd0000", 0x2e}], 0x1}, 0x0)

[  695.207885][T25341] EXT4-fs (loop4): re-mounted. Opts: 
[  695.246433][T25341] EXT4-fs error (device loop4): ext4_mb_generate_buddy:802: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters
02:57:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0xa, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'lo\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

[  695.320114][T25341] Quota error (device loop4): write_blk: dquota write failed
[  695.367615][T25341] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
02:57:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000442c000000000f00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0xffffffff, 0x0, 0x0, 0x944b, 0x0, "fd00c8000001f200000000ffff2efd0306001e"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0, 0x0, "000000f03e5a78010400000000f8ff36eb0008"})

02:57:40 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000457900aa5f634b37b3eeb32debc4d834010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000012800)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4200}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}], 0x0, &(0x7f0000000080)={[{@nodelalloc='nodelalloc'}]})

[  695.415869][T25358] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  695.451953][T25350] Quota error (device loop4): write_blk: dquota write failed
[  695.473506][T25358] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  695.519406][T25350] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
02:57:40 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040))
r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
fchown(r1, 0xee00, 0x0)
fchown(r0, 0xee00, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000001980)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)

02:57:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0xa, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'lo\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

02:57:40 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0)

02:57:40 executing program 5:
prctl$PR_GET_NAME(0x39, &(0x7f00000012c0)=""/215)

02:57:40 executing program 2:
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chmod(&(0x7f0000000000)='./file0/../file0\x00', 0x0)

02:57:41 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}}, 0x0)

02:57:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

02:57:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0xa, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'lo\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

02:57:41 executing program 1:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000000c0))
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="de", 0x1}], 0x1}}], 0x1, 0x0)
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1004000000013)

[  695.884025][T21974] net_ratelimit: 169 callbacks suppressed
[  695.884036][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:41 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0)

[  695.944080][T25380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
02:57:41 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000031003deb0000000020f0ffbfff000000600001005c0001"], 0x74}}, 0x0)
r2 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[  696.008446][T25390] EXT4-fs (loop4): re-mounted. Opts: 
02:57:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

[  696.104643][T25380] EXT4-fs error (device loop4): ext4_mb_generate_buddy:802: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters
02:57:41 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040))
r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[])
fchown(r1, 0xee00, 0x0)
fchown(r0, 0xee00, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000001980)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)

02:57:41 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0)

02:57:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0xa, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'lo\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

02:57:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

02:57:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

02:57:41 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0)

02:57:41 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045401, &(0x7f0000000500))

02:57:41 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

02:57:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

[  696.546908][T25417] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
02:57:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))

02:57:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0xe9, 0x3d, 0x40, 0x424, 0x9d01, 0xdb76, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa3, 0xfb, 0x4f}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000018c0)={0x2c, &(0x7f0000001740), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)

02:57:42 executing program 1:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x200000000}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x18, &(0x7f0000000140)={0x0}}, 0x0)

02:57:42 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0)

02:57:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0)

[  696.986041][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:42 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10)
pkey_mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff)

02:57:42 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x379, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x1ad700)

02:57:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}]}, 0x3c}}, 0x0)

02:57:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

02:57:42 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:42 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000000)='*', 0x6fffff9}}, 0x0)

02:57:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

02:57:42 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="97ba38dfe0100000000000000000000000000086a96c42508f411924143874609dbec2ca8b61c4bb01a7", 0x2a}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}}}, 0x78)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  697.427388][T25461] device batadv0 entered promiscuous mode
02:57:42 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

[  697.558569][    C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e8da9dee: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated.
02:57:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

02:57:43 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000000)='*', 0x6fffff9}}, 0x0)

02:57:43 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

[  698.040474][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.049805][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.062812][    C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000395b00a3: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated.
02:57:43 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000000)='*', 0x6fffff9}}, 0x0)

02:57:43 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:43 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

[  698.428113][    C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000045b21d62: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated.
02:57:43 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:43 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:43 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000000)='*', 0x6fffff9}}, 0x0)

[  698.686058][    C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b3dc1bef: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated.
[  699.108034][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.129492][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:45 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:45 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:45 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:45 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

[  701.081905][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.213592][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:47 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:47 executing program 3:
r0 = socket(0x2a, 0x2, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

02:57:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

[  702.312174][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:47 executing program 3:
r0 = socket(0x2a, 0x2, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

02:57:48 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020)

02:57:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

02:57:48 executing program 3:
r0 = socket(0x2a, 0x2, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

02:57:48 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b000000010003b0c01000000fe6fc87e18e569b3", @ANYRES32=0x0, @ANYBLOB="800023000000000008000a00", @ANYRES32, @ANYBLOB="880012800b00010065727370616e000078000280150013000100000008000700ffffffff050016000200000008001500657409000400120005000a"], 0xb0}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  703.201289][T25561] hub 9-0:1.0: USB hub found
[  703.235732][T25561] hub 9-0:1.0: 8 ports detected
02:57:48 executing program 3:
r0 = socket(0x2a, 0x2, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

02:57:48 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

[  703.352446][T25569] netlink: 'syz-executor.2': attribute type 19 has an invalid length.
[  703.357112][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.463051][T25569] __nla_validate_parse: 2 callbacks suppressed
[  703.463062][T25569] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  703.566352][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:48 executing program 3:
userfaultfd(0x0)

[  703.771708][T25569] netlink: 'syz-executor.2': attribute type 19 has an invalid length.
[  703.885353][T25569] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
02:57:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:49 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0})

02:57:49 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

[  704.118197][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:49 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0})

[  704.366242][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

02:57:49 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

02:57:50 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000200), 0x4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_delroute={0xa8, 0x19, 0x2, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x88, 0xfc, 0x1, 0xff, 0xf, 0x2e00}, [@RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x2}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2}, {0xf23}, {0x1000}, {0xff}, {0x4}, {0xffffa}, {0x101}, {0x20}, {0x1, 0x0, 0x1}, {0x9}, {0x1}, {0x2}, {}, {0x8, 0x0, 0x1}, {0x5}, {0x100}, {0x3}, {0xf9}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd45a}, {0x5}, {0x2}, {0x2}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
openat$audio1(0xffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x141000, 0x0)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x4c4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
quotactl(0x0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="d286f2e36b134f5f83aab77569f50bc39b06a4f5c916876b24c033869c660205")

02:57:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0})

02:57:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

02:57:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0})

02:57:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

02:57:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

02:57:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

[  705.405763][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.415294][  T167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.425389][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

02:57:50 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$tipc(0x1e, 0x2, 0x0)
getsockname(r2, 0x0, 0x0)

02:57:50 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f0000000000)={0x4, 0x0})

02:57:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

02:57:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$tipc(0x1e, 0x2, 0x0)
getsockname(r2, 0x0, 0x0)

02:57:51 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f0000000000)={0x4, 0x0})

02:57:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$tipc(0x1e, 0x2, 0x0)
getsockname(r2, 0x0, 0x0)

02:57:51 executing program 1:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000046c0)='/dev/vmci\x00', 0x2, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0)

02:57:51 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x300001, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

02:57:51 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x1, 0x5})

02:57:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$tipc(0x1e, 0x2, 0x0)
getsockname(r2, 0x0, 0x0)

[  706.517555][ T9542] net_ratelimit: 1 callbacks suppressed
[  706.517564][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

02:57:52 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f0000000000)={0x4, 0x0})

02:57:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0)

02:57:52 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_BETA={0x8}]}}]}, 0x38}}, 0x0)

[  707.258904][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.309330][T25699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  707.331129][T25701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
02:57:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

02:57:52 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffd)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f87ba2a21b68e777a00000000000080000000e3182fe691aa36fa6dd7133c859e969015ef90dc92e005bfc631a46c51bf90f0f4a7692f10410e0bf51a689afe2cff59a0e3fbd6154693fb34b600c16d05ef123578521946eaff0fa425aed505583430b5d2d192196b9ab8ce1ab75e8d4f6ad7d068b68f9ec1882755ff5e"], 0x1c}}, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffff}, 0x4802, 0x0, 0x2f9, 0x4, 0x2}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
clock_gettime(0x1, &(0x7f00000000c0))
clock_settime(0x0, &(0x7f0000000400)={0x77359400})
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
fcntl$dupfd(r0, 0x80c, 0xffffffffffffffff)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f)

02:57:52 executing program 0:
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)

02:57:52 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f0000000000)={0x4, 0x0})

02:57:52 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10)
r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmctl$IPC_RMID(r1, 0x0)

02:57:53 executing program 0:
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)

02:57:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/154)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3ff, {0x2a, 0x0, 0x1, 0xff, 0x3}})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x5, 0x81, 0x0, 0x0, 0x20, "b5045b67d84540711653bbc51f8e2a881bb41f", 0x9, 0xb5})
openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380))
process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)

[  707.858131][T21975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:53 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

02:57:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c00)=""/4108, 0x100c}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f00000004c0)=""/259, 0x103}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000600)=""/229, 0xe5}], 0x8}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002c40)=""/98, 0x62}, {0x0}, {&(0x7f0000002cc0)=""/108, 0x6c}], 0x3, &(0x7f0000002e40)=""/57, 0x39}}], 0x2, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)

02:57:53 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x6c, {0x2, 0x0, @rand_addr=0x64010102}, 'wg1\x00'})

02:57:54 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffd)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f87ba2a21b68e777a00000000000080000000e3182fe691aa36fa6dd7133c859e969015ef90dc92e005bfc631a46c51bf90f0f4a7692f10410e0bf51a689afe2cff59a0e3fbd6154693fb34b600c16d05ef123578521946eaff0fa425aed505583430b5d2d192196b9ab8ce1ab75e8d4f6ad7d068b68f9ec1882755ff5e"], 0x1c}}, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffff}, 0x4802, 0x0, 0x2f9, 0x4, 0x2}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
clock_gettime(0x1, &(0x7f00000000c0))
clock_settime(0x0, &(0x7f0000000400)={0x77359400})
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
fcntl$dupfd(r0, 0x80c, 0xffffffffffffffff)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f)

02:57:54 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4f, 0x10, 0x0, 0x1, [@generic="3e2a895053184e87d3b8a8618454ccc5eff4442db329c2f992f559a0281c2fc4f3a398d1c1e9d67c08774203b2abb5c8261919", @typed={0xb, 0x0, 0x0, 0x0, @str='.^+&%G\x00'}, @typed={0xb, 0x0, 0x0, 0x0, @str='.^+&%G\x00'}]}]}, 0x64}}, 0x0)

02:57:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f00000000c0), 0x4)

[  708.927767][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:54 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x0, 0xe0, 0xe0, 0xe0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x6020000}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706000000b1000000124ac31d4fda375c7794e420aa63529ebcf847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bridge_slave_1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "29f0be44329ad4d94a815c71ad95092b933b5e380a7e5d3c56c51e9d0027"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)

02:57:54 executing program 0:
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)

02:57:54 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffd)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f87ba2a21b68e777a00000000000080000000e3182fe691aa36fa6dd7133c859e969015ef90dc92e005bfc631a46c51bf90f0f4a7692f10410e0bf51a689afe2cff59a0e3fbd6154693fb34b600c16d05ef123578521946eaff0fa425aed505583430b5d2d192196b9ab8ce1ab75e8d4f6ad7d068b68f9ec1882755ff5e"], 0x1c}}, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffff}, 0x4802, 0x0, 0x2f9, 0x4, 0x2}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
clock_gettime(0x1, &(0x7f00000000c0))
clock_settime(0x0, &(0x7f0000000400)={0x77359400})
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
fcntl$dupfd(r0, 0x80c, 0xffffffffffffffff)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f)

02:57:54 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x44, &(0x7f0000000000), 0x4)

02:57:54 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x0, "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"})
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080))

02:57:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x3e76, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0)

02:57:54 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffd)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f87ba2a21b68e777a00000000000080000000e3182fe691aa36fa6dd7133c859e969015ef90dc92e005bfc631a46c51bf90f0f4a7692f10410e0bf51a689afe2cff59a0e3fbd6154693fb34b600c16d05ef123578521946eaff0fa425aed505583430b5d2d192196b9ab8ce1ab75e8d4f6ad7d068b68f9ec1882755ff5e"], 0x1c}}, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffff}, 0x4802, 0x0, 0x2f9, 0x4, 0x2}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
clock_gettime(0x1, &(0x7f00000000c0))
clock_settime(0x0, &(0x7f0000000400)={0x77359400})
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
fcntl$dupfd(r0, 0x80c, 0xffffffffffffffff)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r2, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f)

02:57:54 executing program 0:
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)

02:57:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:54 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:54 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28030026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0)

02:57:54 executing program 2:
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000ac0), 0x8)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="80", 0x1}], 0x1}, 0x0)

02:57:55 executing program 0:
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

02:57:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x3e76, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0)

[  709.927974][T25794] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  709.986730][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.988023][T25794] netlink: 206846 bytes leftover after parsing attributes in process `syz-executor.3'.
02:57:55 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:55 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x3e76, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0)

[  710.326782][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.597209][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.606926][T21975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.621388][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x3e76, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0)

02:57:55 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:56 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28030026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0)

02:57:56 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="24000000140081563e06080a000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1, 0x0, 0x0, 0x400300}, 0x0)

02:57:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

02:57:56 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x2, @broadcast}, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(r1, r3)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff)
sendto$inet(r0, 0x0, 0x0, 0x900000020004030, &(0x7f0000000000)={0x2, 0x2, @empty}, 0x10)
sendto(r0, &(0x7f0000000140)='\x00', 0x1, 0x4000847, 0x0, 0x0)

[  711.005736][T25835] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  711.055188][T25835] netlink: 206846 bytes leftover after parsing attributes in process `syz-executor.3'.
02:57:56 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x4004510f, 0xfffffffffffffffd)

02:57:56 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x23880, 0x0)
mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5111, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00')
read(r0, &(0x7f0000000380)=""/233, 0xffbe)

02:57:56 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="24000000140081563e06080a000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1, 0x0, 0x0, 0x400300}, 0x0)

02:57:56 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026200000524"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

02:57:56 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)

02:57:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0)

02:57:56 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

[  711.637807][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:57:56 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="24000000140081563e06080a000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1, 0x0, 0x0, 0x400300}, 0x0)

02:57:57 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28030026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0)

02:57:57 executing program 1:
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000040)="cca0db25f8ef5c392b0691d6c5730815403e55a50faa91ba6c5e3432c7d125cd719aa6729f188bc14de18c44505973a4580178317f823167bd44d418", 0x3c}], 0x1}], 0x1, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc1105517, &(0x7f0000000040))

02:57:57 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffdff}]})
unlinkat(0xffffffffffffffff, 0x0, 0x0)

[  711.885683][T11862] usb 1-1: new high-speed USB device number 24 using dummy_hcd
02:57:57 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x0)

02:57:57 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="24000000140081563e06080a000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1, 0x0, 0x0, 0x400300}, 0x0)

02:57:57 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

[  712.057903][T25891] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
02:57:57 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "d3b2ccc2d70ccf2acede253b8ca65b33", '\x00', "9676e64fbcbdb666"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

[  712.126511][T25891] netlink: 206846 bytes leftover after parsing attributes in process `syz-executor.3'.
[  712.266182][T11862] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  712.322568][T11862] usb 1-1: config 5 has no interfaces?
[  712.525756][T11862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  712.534837][T11862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.585511][T11862] usb 1-1: Product: syz
[  712.589724][T11862] usb 1-1: Manufacturer: syz
[  712.594328][T11862] usb 1-1: SerialNumber: syz
[  712.679567][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.139889][T21974] usb 1-1: USB disconnect, device number 24
[  713.155754][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.395148][T11862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.724875][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.914688][ T9744] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  714.285298][ T9744] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  714.300110][ T9744] usb 1-1: config 5 has no interfaces?
[  714.475324][ T9744] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  714.489194][ T9744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.509897][ T9744] usb 1-1: Product: syz
02:57:59 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026200000524"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

02:57:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00')
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4118, 0x1016}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)

02:57:59 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x0)

02:57:59 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28030026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0)

02:57:59 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

02:57:59 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "d3b2ccc2d70ccf2acede253b8ca65b33", '\x00', "9676e64fbcbdb666"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

[  714.522634][ T9744] usb 1-1: Manufacturer: syz
[  714.555846][ T9744] usb 1-1: SerialNumber: syz
[  714.614414][ T9744] usb 1-1: can't set config #5, error -71
[  714.667946][ T9744] usb 1-1: USB disconnect, device number 25
[  714.697427][T25956] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  714.754617][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:58:00 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

[  714.800387][T25956] netlink: 206846 bytes leftover after parsing attributes in process `syz-executor.3'.
02:58:00 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x0)

[  715.126957][ T9744] usb 1-1: new high-speed USB device number 26 using dummy_hcd
02:58:00 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "d3b2ccc2d70ccf2acede253b8ca65b33", '\x00', "9676e64fbcbdb666"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

02:58:00 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

[  715.504733][ T9744] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  715.548821][ T9744] usb 1-1: config 5 has no interfaces?
02:58:00 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x0)

02:58:00 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/206, 0x4a, 0xce, 0x8}, 0x20)

[  715.715372][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.726334][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.735880][T21974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.754603][ T9744] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  715.787318][ T9744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.841694][ T9744] usb 1-1: Product: syz
[  715.857553][ T9744] usb 1-1: Manufacturer: syz
[  715.876792][ T9744] usb 1-1: SerialNumber: syz
[  716.434053][ T9744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.467534][ T9542] usb 1-1: USB disconnect, device number 26
[  716.833343][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:58:02 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

02:58:02 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

02:58:02 executing program 5:
truncate(0x0, 0xfffffffffffffc85)

02:58:02 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

02:58:02 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "d3b2ccc2d70ccf2acede253b8ca65b33", '\x00', "9676e64fbcbdb666"}, 0x28)
sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

02:58:02 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026200000524"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

02:58:02 executing program 5:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

02:58:02 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140))

[  717.363219][    T5] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  717.733588][    T5] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  717.752424][    T5] usb 1-1: config 5 has no interfaces?
02:58:03 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)

[  717.873078][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:58:03 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)
poll(&(0x7f0000000140)=[{r3}], 0x1, 0x0)

02:58:03 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x8}]}]}}, &(0x7f0000004600)=""/210, 0x2e, 0xd2, 0x8}, 0x20)

[  717.942719][    T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  717.952062][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
02:58:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

[  718.002003][    T5] usb 1-1: Product: syz
[  718.017231][    T5] usb 1-1: Manufacturer: syz
[  718.040673][    T5] usb 1-1: SerialNumber: syz
02:58:03 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x8}]}]}}, &(0x7f0000004600)=""/210, 0x2e, 0xd2, 0x8}, 0x20)

[  718.057921][T26052] BPF:	Invalid name_offset:3
02:58:03 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)

02:58:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='D'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x0)

02:58:03 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x8}]}]}}, &(0x7f0000004600)=""/210, 0x2e, 0xd2, 0x8}, 0x20)

[  718.228682][T26067] BPF:	Invalid name_offset:3
02:58:03 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140))

[  718.429173][T26078] BPF:	Invalid name_offset:3
[  718.620976][    T5] usb 1-1: USB disconnect, device number 27
[  718.922816][ T9542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:58:04 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026200000524"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

02:58:04 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)

02:58:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='D'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x0)

02:58:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x8}]}]}}, &(0x7f0000004600)=""/210, 0x2e, 0xd2, 0x8}, 0x20)

02:58:04 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0)
read$usbfs(r0, &(0x7f0000000080)=""/247, 0xf7)
read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020)

02:58:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  719.233063][T26112] BPF:	Invalid name_offset:3
02:58:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='D'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x0)

02:58:04 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140))

02:58:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000010500)="ff030400fc030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x2000}, {&(0x7f0000011d00)="ffff01", 0x3, 0x12000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
dup(0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(0x0)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x0, 0x2, 0x2, &(0x7f0000000340))
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410081, 0x0)
pwritev(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x2, 0x20)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r3=>0x0})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x28}}, 0x0)
ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f00000000c0)='syz1\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'})

02:58:04 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)

02:58:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x106}}}]}, 0x60}}, 0x0)

[  719.472216][    T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
02:58:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='D'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x0)

[  719.611934][ T9542] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  719.952033][T21975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.012430][ T9542] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  720.031675][ T9542] usb 1-1: config 5 has no interfaces?
[  720.194606][ T9542] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  720.220903][ T9542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.251442][ T9542] usb 1-1: Product: syz
[  720.255658][ T9542] usb 1-1: Manufacturer: syz
[  720.260268][ T9542] usb 1-1: SerialNumber: syz
[  720.751930][    T8] wlan0: Trigger new scan to find an IBSS to join
[  720.791546][    T8] ------------[ cut here ]------------
[  720.796968][ T9542] usb 1-1: USB disconnect, device number 28
[  720.797716][    T8] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20