last executing test programs:

15m21.597326423s ago: executing program 0 (id=208):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x80000)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
lseek(r2, 0x851, 0x0)

15m20.708846545s ago: executing program 1 (id=210):
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "a4a5bf97bebf6a5d382d47edaa55c027", 0x8}}}, 0x30)
socket$inet6_icmp(0xa, 0x2, 0x3a)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_open_procfs(0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

15m20.632404787s ago: executing program 0 (id=211):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'macvlan1\x00', 0x7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1f}, &(0x7f0000000240)=0x8)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

15m20.611915517s ago: executing program 1 (id=212):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

15m19.509135654s ago: executing program 0 (id=215):
syz_ublk_setup_io_uring(0x1a30, 0x0, &(0x7f0000000380), &(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4c040)

15m19.508496074s ago: executing program 1 (id=216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

15m18.605318686s ago: executing program 1 (id=219):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

15m18.239979375s ago: executing program 0 (id=221):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x80000)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
lseek(r2, 0x851, 0x0)

15m18.03157518s ago: executing program 1 (id=224):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_eee={0x44, 0x2, 0x3, 0x9, 0xff1, 0x3, 0x0, 0x4, [0x3, 0x7f]}})
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='oxu210hp-hcd', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='QEMU0002:00\x00', 0xb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)={@loopback}, &(0x7f0000000180)=0x14)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
ioperm(0x0, 0x3, 0x2)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1, 0x0, 0xfffffffffffffeac}, 0x121)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0xfff, 0xfff, 0x9]}, &(0x7f00000000c0)=0x44)
ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000))

15m16.348740721s ago: executing program 0 (id=226):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080))

15m13.08926331s ago: executing program 0 (id=229):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

15m12.036014176s ago: executing program 1 (id=233):
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[@ANYBLOB="7472b647367320160fa42e64616e733d7264"])
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$kcm(0x10, 0x2, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc034, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000005580)={0x2020}, 0x2020)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})

14m57.795839291s ago: executing program 32 (id=229):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

14m56.654719959s ago: executing program 33 (id=233):
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[@ANYBLOB="7472b647367320160fa42e64616e733d7264"])
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$kcm(0x10, 0x2, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc034, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000005580)={0x2020}, 0x2020)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})

3m10.589101414s ago: executing program 5 (id=1981):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0)
r2 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x6, 0x4, @tid=r2}, &(0x7f0000044000)=<r3=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0)
inotify_init1(0x80400)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x14)
ioctl(r6, 0x400c4d01, &(0x7f0000000900))
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840)

3m3.283512371s ago: executing program 5 (id=1989):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2m59.364832947s ago: executing program 5 (id=1992):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4})

2m55.392964323s ago: executing program 5 (id=1998):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000340)={0x0, 0x972, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m47.962841844s ago: executing program 5 (id=2003):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
setreuid(r2, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)

2m40.000294358s ago: executing program 5 (id=2007):
getdents(0xffffffffffffffff, &(0x7f0000000000)=""/101, 0x65)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x40000200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x106f)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbhid/remove_id\x00', 0x1, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00')
read$FUSE(r7, &(0x7f0000000880)={0x2020}, 0x2020)
write(r6, &(0x7f0000000200)='1234 56', 0x7)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003340)=ANY=[@ANYBLOB="8a12af115346e5942abd7000ffdbdf25"], 0xffffff1d}, 0x1, 0x0, 0x0, 0x9bba02f124f83b0b}, 0x4000)

2m24.344011309s ago: executing program 34 (id=2007):
getdents(0xffffffffffffffff, &(0x7f0000000000)=""/101, 0x65)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x40000200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x106f)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbhid/remove_id\x00', 0x1, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00')
read$FUSE(r7, &(0x7f0000000880)={0x2020}, 0x2020)
write(r6, &(0x7f0000000200)='1234 56', 0x7)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003340)=ANY=[@ANYBLOB="8a12af115346e5942abd7000ffdbdf25"], 0xffffff1d}, 0x1, 0x0, 0x0, 0x9bba02f124f83b0b}, 0x4000)

2m10.930056355s ago: executing program 2 (id=2029):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

2m6.736342917s ago: executing program 2 (id=2034):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg\x00', {0x2}, 0x1})
socket$unix(0x1, 0x1, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000300))
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=<r2=>0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newtfilter={0x40, 0x2c, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(0xffffffffffffffff, 0x2)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
read$dsp(r4, &(0x7f00000001c0)=""/62, 0x3e)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0xfffffffffffffffe)
poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0x101)

2m0.01906381s ago: executing program 2 (id=2039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = gettid()
r3 = open(0x0, 0x4a6440, 0x1a0)
migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
fdatasync(r3)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6(0xa, 0x802, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

1m53.696283894s ago: executing program 2 (id=2043):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0)
write(r0, &(0x7f0000000e00)='1\n', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\n', 0x2)
mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000002000), 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=<r5=>r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3cafb5baebff0000000000000000000000000000581d2d8487846ef224cdddcc4ec7dfa3e273a5da0c534a0b767494b7bef5b04afb6488b8a7f9d28a5f1ac522ff20bcea39cf189398156042fb555bc33187b4217807ab70680c31728f0613fce99ccb8402a7e0cfef4e3b65252778815f8e008d0d3b348f7279b1ce33940674b6703be20afd52ff47092a2947155e7d84a416b18384acb8b2a5920adfc8aa922b94742747daadcd445949d43771a0c6f5e781f695f43e859bb883d9ad311b092d003a4f5156af6f1e287415e4415716310115f17e8d651489f041a3254f9ca7cead8bb8fcecbad20bc184de790b1268709127d04b8e6d84", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m49.821292449s ago: executing program 2 (id=2050):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = gettid()
timer_create(0x0, 0x0, 0x0)
r4 = open(0x0, 0x4a6440, 0x1a0)
migrate_pages(r3, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
fdatasync(r4)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000010000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet6(0xa, 0x802, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888)
accept4(r1, 0x0, 0x0, 0x80800)

1m45.068104544s ago: executing program 7 (id=2055):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000002000000000000000000000000ffff"], 0x134}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x2, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x20000003, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m39.229376126s ago: executing program 7 (id=2057):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e4220"], 0x7)

1m37.668083384s ago: executing program 7 (id=2058):
mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x1, 0x88, 0x20000}, 0xfffffffffffffed6)

1m36.384515535s ago: executing program 7 (id=2059):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0)

1m35.121822446s ago: executing program 7 (id=2060):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0)
write(r0, &(0x7f0000000e00)='1\n', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\n', 0x2)
mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000002000), 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2097c60b2bdf5c02)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=<r5=>r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3cafb5baebff0000000000000000000000000000581d2d8487846ef224cdddcc4ec7dfa3e273a5da0c534a0b767494b7bef5b04afb6488b8a7f9d28a5f1ac522ff20bcea39cf189398156042fb555bc33187b4217807ab70680c31728f0613fce99ccb8402a7e0cfef4e3b65252778815f8e008d0d3b348f7279b1ce33940674b6703be20afd52ff47092a2947155e7d84a416b18384acb8b2a5920adfc8aa922b94742747daadcd445949d43771a0c6f5e781f695f43e859bb883d9ad311b092d003a4f5156af6f1e287415e4415716310115f17e8d651489f041a3254f9ca7cead8bb8fcecbad20bc184de790b1268709127d04b8e6d84", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m35.120493356s ago: executing program 2 (id=2061):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = fsopen(&(0x7f00000003c0)='gadgetfs\x00', 0x0)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x1, 0x0)
fchdir(r4)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000000)=""/49, 0x31)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='ro\x00', &(0x7f00000000c0)='proc\x00', 0x0)
r6 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000100100"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m34.312427186s ago: executing program 7 (id=2065):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
close(0x3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b})
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
r12 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r12, 0x0, 0x0)
syz_usb_control_io$printer(r12, 0x0, 0x0)
r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r13, 0x80015b1a, 0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m23.581877727s ago: executing program 4 (id=2074):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814)
mount(0x0, 0x0, 0x0, 0x8, 0x0)

1m19.801456379s ago: executing program 35 (id=2061):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = fsopen(&(0x7f00000003c0)='gadgetfs\x00', 0x0)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x1, 0x0)
fchdir(r4)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000000)=""/49, 0x31)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='ro\x00', &(0x7f00000000c0)='proc\x00', 0x0)
r6 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000100100"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m19.250426622s ago: executing program 36 (id=2065):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
close(0x3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b})
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
ftruncate(r6, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
r12 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r12, 0x0, 0x0)
syz_usb_control_io$printer(r12, 0x0, 0x0)
r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r13, 0x80015b1a, 0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m16.821167481s ago: executing program 4 (id=2086):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
setreuid(r2, 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000700)='\x00'/28, 0x1c)
write(r3, &(0x7f0000000700)='\x00'/32, 0x20)

1m8.165321192s ago: executing program 4 (id=2089):
r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1m7.82567007s ago: executing program 4 (id=2094):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="e0000002000000000000000000000000ffff"], 0x134}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x2, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x20000003, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m7.511459778s ago: executing program 4 (id=2095):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB='8\x00-'], 0x54}}, 0x800)

1m7.358468432s ago: executing program 4 (id=2097):
openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000004564439a02443175ba2ffeebd6068765e9c9607d05fbfbdaf1b409dbcc5265235f0b0f293c64972a1abd6217a6c0abdf4f710dc0969b758a8c8653f2690191773ae9cbb22d90a91869690e952b49cace7e3e4e6499cc2a32e6de2a0d43e453ff4b0cbafb4f80a48d6b066a09ef73db097fd6d621f90a449dcd1c2318a9aeaa706e86444e0cbc2abe82818cc5abdf631a37aba402bcec0cb553ae4ef9110958eacaaa9097e248b8a5291a5a42db81db1013a266"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0)
mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)

52.073175183s ago: executing program 37 (id=2097):
openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000004564439a02443175ba2ffeebd6068765e9c9607d05fbfbdaf1b409dbcc5265235f0b0f293c64972a1abd6217a6c0abdf4f710dc0969b758a8c8653f2690191773ae9cbb22d90a91869690e952b49cace7e3e4e6499cc2a32e6de2a0d43e453ff4b0cbafb4f80a48d6b066a09ef73db097fd6d621f90a449dcd1c2318a9aeaa706e86444e0cbc2abe82818cc5abdf631a37aba402bcec0cb553ae4ef9110958eacaaa9097e248b8a5291a5a42db81db1013a266"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0)
mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)

19.204920763s ago: executing program 9 (id=2154):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000011140100000100000000020000009f51de53865a080001000000000008004b0028000000e4ff03000100000000004a00020000008bcfea1774331b0047fe0dfaffff231e73882ef1e0b31ca4f2c528b86662a3d8c09ba78f6733d344f22836de57b541104123def98cea31e0ec291760a4957d23893b08a255d91eccaa26afe5fb298a7ff2073543eb2482832b465f05025a6b89946a84cb86878ffd1d6b7b929970fca875c8b66f1d968ec1d1a220"], 0x30}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25180000000500572bd1ac82bad54c930a290000000000eeff00000083c700000001bf3c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4080)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0xa}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={r2, 0x5d}, 0x8)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
r5 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r5, 0x0, 0x33, 0x0, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

15.725239797s ago: executing program 9 (id=2159):
bpf$PROG_LOAD(0x2, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000270000042cbd7000fedbdf253e6c4f5934af26ef87440d1b0c1fd427f3651013fffc8be2f5abcd99697d1e34c658f4d90f70a2651ceaef4c76f6879b836c783902bbd563d151136446e02382bc49e476b760ad9a51db43ea445d0505eb938e8ff24d005980ce7c669dd37638aa"], 0xc4}], 0x1}, 0x20040000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b})
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040050)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008894)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x1)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
mount(0x0, 0x0, &(0x7f0000000000)='sysfs\x00', 0x20000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800)
io_setup(0x2, &(0x7f0000000b80)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}])

12.242408102s ago: executing program 9 (id=2163):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

10.589624073s ago: executing program 6 (id=2168):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000011140100000100000000020000009f51de53865a080001000000000008004b0028000000e4ff03000100000000004a00020000008bcfea1774331b0047fe0dfaffff231e73882ef1e0b31ca4f2c528b86662a3d8c09ba78f6733d344f22836de57b541104123def98cea31e0ec291760a4957d23893b08a255d91eccaa26afe5fb298a7ff2073543eb2482832b465f05025a6b89946a84cb86878ffd1d6b7b929970fca875c8b66f1d968ec1d1a220"], 0x30}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25180000000500572bd1ac82bad54c930a290000000000eeff00000083c700000001bf3c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4080)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0xa}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440)={r2, 0x5d}, 0x8)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
r5 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r5, 0x0, 0x33, 0x0, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

10.182432982s ago: executing program 3 (id=2169):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4})
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})

6.641180659s ago: executing program 3 (id=2170):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080)

6.637862739s ago: executing program 6 (id=2171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0)

6.342171906s ago: executing program 6 (id=2172):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bb"], 0x40}}, 0x20000840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, 0x0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x10, 0x7b0, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000040)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r3, &(0x7f0000000200)=@unlock_all, 0xb)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48002)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)

5.933216896s ago: executing program 8 (id=2173):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000100033f42bbd700000000000ff0100000000000000000000000000012001000100000000000000000000000200000009000000", @ANYBLOB="e0000002000000000000000000000000ffff"], 0x134}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x2, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x20000003, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.7838668s ago: executing program 3 (id=2174):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1011e0, 0x1000, 0xfffffffc, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24)

5.7484544s ago: executing program 9 (id=2175):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB='8\x00-'], 0x54}}, 0x800)

5.261474162s ago: executing program 3 (id=2176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x44813}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = gettid()
r3 = open(0x0, 0x4a6440, 0x1a0)
migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
fdatasync(r3)
r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6(0xa, 0x802, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

5.170367884s ago: executing program 8 (id=2177):
mkdir(0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00)
r1 = dup2(r0, r0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff})
syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
userfaultfd(0x80001)

5.133441755s ago: executing program 9 (id=2178):
r0 = memfd_create(&(0x7f0000000100)='huge\x00', 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x11, r0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000001c0)={0x0, 0x200000})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00020004"], 0x50)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x23)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
r6 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x3, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x108, 0x8206, 0x1, 0x9c, r3}, &(0x7f0000000040)=0x9)

4.868224322s ago: executing program 6 (id=2179):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0), 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66dfff00"}, 0xfa, 0x4})
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})

4.846516972s ago: executing program 3 (id=2180):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

4.628344007s ago: executing program 8 (id=2181):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0)

2.182864637s ago: executing program 8 (id=2182):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x4000)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

601.250766ms ago: executing program 3 (id=2183):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080)

597.973526ms ago: executing program 6 (id=2184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844)

412.961ms ago: executing program 8 (id=2185):
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)

126.395197ms ago: executing program 6 (id=2186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')
unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00')

96.031648ms ago: executing program 8 (id=2187):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000100033f42bbd700000000000ff0100000000000000000000000000012001000100000000000000000000000200000009000000", @ANYBLOB="e0000002000000000000000000000000ffff"], 0x134}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x2, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x20000003, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 9 (id=2188):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000c00)='1', 0x1)
mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0)
write(r2, &(0x7f0000001400)='1', 0x1)

kernel console output (not intermixed with test programs):

tice: (10515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  695.510685][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.215097][T10515] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  696.690480][   T41] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  698.027916][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.037330][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.210750][   T41] usb 7-1: Using ep0 maxpacket: 32
[  698.221522][   T41] usb 7-1: config 0 has no interfaces?
[  698.353116][   T41] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  698.416267][   T41] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  698.460467][   T41] usb 7-1: Product: syz
[  698.464714][   T41] usb 7-1: Manufacturer: syz
[  699.338262][   T41] usb 7-1: SerialNumber: syz
[  699.345382][   T41] usb 7-1: config 0 descriptor??
[  699.352084][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.943173][T10539] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  700.336077][   T41] usb 7-1: can't set config #0, error -71
[  700.347192][   T41] usb 7-1: USB disconnect, device number 8
[  700.390751][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.622253][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.630842][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.639446][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.650401][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.659963][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.748764][ T8661] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  700.859591][T10555] jffs2: notice: (10555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  703.108161][   T41] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  704.218913][ T6233] net_ratelimit: 8 callbacks suppressed
[  704.218930][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.238444][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.247565][T10464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.256596][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.322262][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.480667][   T41] usb 7-1: Using ep0 maxpacket: 32
[  704.496619][   T41] usb 7-1: config 0 has no interfaces?
[  704.504447][   T41] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  704.523857][   T41] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  704.538319][   T41] usb 7-1: Product: syz
[  704.549538][   T41] usb 7-1: Manufacturer: syz
[  704.556610][   T41] usb 7-1: SerialNumber: syz
[  704.589114][   T41] usb 7-1: config 0 descriptor??
[  705.421345][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.633219][   T41] usb 7-1: can't set config #0, error -71
[  705.727940][T10587] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  706.441038][   T41] usb 7-1: USB disconnect, device number 9
[  706.518390][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.350545][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.602323][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.685856][ T8661] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  708.643499][T10617] jffs2: notice: (10617) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  709.415348][T10617] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  709.684697][   T41] net_ratelimit: 1 callbacks suppressed
[  709.684717][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.390515][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.711039][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.721658][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.740987][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.749891][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.599286][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.612436][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.621458][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.630092][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.492421][ T6233] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  713.946694][ T6233] usb 6-1: Using ep0 maxpacket: 32
[  714.276575][ T6233] usb 6-1: config 0 has no interfaces?
[  714.284974][ T6233] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  714.326089][ T6233] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  714.364228][ T6233] usb 6-1: Product: syz
[  714.369039][ T6233] usb 6-1: Manufacturer: syz
[  714.401371][ T6233] usb 6-1: SerialNumber: syz
[  714.431093][ T6233] usb 6-1: config 0 descriptor??
[  715.258359][   T41] net_ratelimit: 3 callbacks suppressed
[  715.258379][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.319909][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.749406][ T6233] usb 6-1: can't set config #0, error -71
[  716.763555][ T6233] usb 6-1: USB disconnect, device number 9
[  716.777897][ T5345] udevd[5345]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory
[  716.890747][ T3654] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  716.916397][T10672] netlink: 'syz.2.1650': attribute type 1 has an invalid length.
[  716.987818][T10672] 8021q: adding VLAN 0 to HW filter on device bond2
[  717.060382][ T3654] usb 4-1: device descriptor read/64, error -71
[  717.195903][ T4854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.204188][T10029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.212695][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.221380][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.230505][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.238647][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.341265][ T3654] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  717.358357][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.560469][ T3654] usb 4-1: device descriptor read/64, error -71
[  717.693364][T10694] jffs2: notice: (10694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  718.346088][T10694] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  718.346384][ T3654] usb usb4-port1: attempt power cycle
[  718.424915][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.760407][ T3654] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  719.421824][ T3654] usb 4-1: device descriptor read/8, error -71
[  719.710450][ T3654] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  720.470735][ T6233] net_ratelimit: 1 callbacks suppressed
[  720.470749][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.252892][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.320631][ T4319] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  721.470723][ T3654] usb 4-1: device descriptor read/8, error -71
[  721.514351][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.576895][   T26] audit: type=1800 audit(1786189438.183:66): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1664" name="memory_backed" dev="configfs" ino=60772 res=0 errno=0
[  721.590824][ T3654] usb usb4-port1: unable to enumerate USB device
[  721.633891][T10712] netlink: 'syz.6.1664': attribute type 1 has an invalid length.
[  721.668817][   T26] audit: type=1800 audit(1786189438.223:67): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1664" name="zone_nr_conv" dev="configfs" ino=60775 res=0 errno=0
[  721.672050][T10718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.699066][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.738213][ T4319] usb 6-1: Using ep0 maxpacket: 32
[  721.748673][   T26] audit: type=1800 audit(1786189438.223:68): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1664" name="power" dev="configfs" ino=60776 res=0 errno=0
[  721.750214][ T4319] usb 6-1: config 0 has no interfaces?
[  721.900959][ T4319] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  721.927984][T10712] 8021q: adding VLAN 0 to HW filter on device bond4
[  721.947230][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  721.976552][ T4319] usb 6-1: Product: syz
[  722.010904][ T4319] usb 6-1: Manufacturer: syz
[  722.021886][ T4319] usb 6-1: SerialNumber: syz
[  722.043261][ T4319] usb 6-1: config 0 descriptor??
[  722.550736][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.030819][ T7344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.041840][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.050993][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.069996][ T4434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.397204][ T3654] usb 6-1: USB disconnect, device number 10
[  724.659243][T10751] netlink: 'syz.6.1674': attribute type 1 has an invalid length.
[  724.667561][T10751] netlink: 'syz.6.1674': attribute type 2 has an invalid length.
[  726.150669][ T3654] net_ratelimit: 4 callbacks suppressed
[  726.150685][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.460865][   T26] audit: type=1800 audit(1786189443.063:69): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1679" name="memory_backed" dev="configfs" ino=60042 res=0 errno=0
[  726.739492][   T26] audit: type=1800 audit(1786189443.213:70): pid=10768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1679" name="zone_nr_conv" dev="configfs" ino=60045 res=0 errno=0
[  726.791938][T10766] netlink: 'syz.5.1679': attribute type 1 has an invalid length.
[  727.056300][   T26] audit: type=1800 audit(1786189443.293:71): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1679" name="power" dev="configfs" ino=60046 res=0 errno=0
[  727.201128][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.221008][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.322496][T10766] 8021q: adding VLAN 0 to HW filter on device bond6
[  728.626505][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.603918][ T7344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.612436][ T4546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.621237][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.629401][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.638521][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.646805][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.310608][ T9124] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  731.630609][ T9124] usb 7-1: Using ep0 maxpacket: 32
[  731.655826][ T9124] usb 7-1: config 0 has no interfaces?
[  731.765495][  T127] net_ratelimit: 2 callbacks suppressed
[  731.765512][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.779724][ T9124] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  731.867807][ T9124] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  731.934860][ T9124] usb 7-1: Product: syz
[  732.010185][ T9124] usb 7-1: Manufacturer: syz
[  732.043014][ T9124] usb 7-1: SerialNumber: syz
[  732.145948][ T9124] usb 7-1: config 0 descriptor??
[  732.710661][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.790583][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.264835][   T41] usb 7-1: USB disconnect, device number 10
[  733.830822][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.880977][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.590863][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.599679][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.608476][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.751185][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.771475][T10464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.160482][  T127] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  738.712853][   T41] net_ratelimit: 3 callbacks suppressed
[  738.712873][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.800535][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.190500][  T127] usb 6-1: Using ep0 maxpacket: 32
[  739.208982][  T127] usb 6-1: config 0 has no interfaces?
[  739.264538][  T127] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  739.283331][  T127] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  739.305608][  T127] usb 6-1: Product: syz
[  739.320921][  T127] usb 6-1: Manufacturer: syz
[  739.326677][  T127] usb 6-1: SerialNumber: syz
[  739.362708][  T127] usb 6-1: config 0 descriptor??
[  739.751827][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.152973][ T6233] usb 6-1: USB disconnect, device number 11
[  740.791316][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.871342][ T4366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.880378][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.896290][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.830831][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.097476][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.127538][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.411112][T10905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  742.419522][T10905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  742.428407][T10905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  743.318939][   T26] audit: type=1800 audit(1786189459.923:72): pid=10921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1718" name="memory_backed" dev="configfs" ino=61274 res=0 errno=0
[  743.392196][T10921] netlink: 'syz.6.1718': attribute type 1 has an invalid length.
[  743.470439][   T26] audit: type=1800 audit(1786189459.973:73): pid=10921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1718" name="zone_nr_conv" dev="configfs" ino=61275 res=0 errno=0
[  743.579211][   T26] audit: type=1800 audit(1786189459.973:74): pid=10921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1718" name="power" dev="configfs" ino=61276 res=0 errno=0
[  743.729437][T10921] 8021q: adding VLAN 0 to HW filter on device bond5
[  743.927088][   T41] net_ratelimit: 3 callbacks suppressed
[  743.927152][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.051156][    T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  745.208893][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.300661][    T7] usb 4-1: Using ep0 maxpacket: 32
[  745.349471][    T7] usb 4-1: config 0 has no interfaces?
[  745.467442][    T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  745.607644][    T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  745.658597][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.736899][    T7] usb 4-1: Product: syz
[  745.815484][    T7] usb 4-1: Manufacturer: syz
[  745.916520][    T7] usb 4-1: SerialNumber: syz
[  746.100707][    T7] usb 4-1: config 0 descriptor??
[  746.631846][ T4391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.838958][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.848185][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.950443][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.192046][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.201123][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.216745][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.283027][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.444253][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.081313][    T7] usb 4-1: USB disconnect, device number 20
[  749.031845][  T127] net_ratelimit: 1 callbacks suppressed
[  749.031866][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.524494][   T26] audit: type=1800 audit(1786189466.133:75): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1736" name="memory_backed" dev="configfs" ino=60397 res=0 errno=0
[  749.527208][T10976] netlink: 'syz.6.1736': attribute type 1 has an invalid length.
[  749.596871][   T26] audit: type=1800 audit(1786189466.133:76): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1736" name="zone_nr_conv" dev="configfs" ino=60398 res=0 errno=0
[  749.888354][   T26] audit: type=1800 audit(1786189466.133:77): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1736" name="power" dev="configfs" ino=60399 res=0 errno=0
[  749.902808][T10976] 8021q: adding VLAN 0 to HW filter on device bond6
[  750.070952][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.043092][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.123636][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.208602][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  751.217365][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  751.224914][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  752.151064][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.191102][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.450608][ T6233] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  754.980567][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.990691][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.036454][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.045587][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.054096][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.062443][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.071719][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.081169][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.300383][ T6233] usb 5-1: Using ep0 maxpacket: 32
[  755.307230][ T6233] usb 5-1: config 0 has no interfaces?
[  755.321877][ T6233] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  755.607637][ T6233] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  755.670383][ T6233] usb 5-1: Product: syz
[  755.675231][ T6233] usb 5-1: Manufacturer: syz
[  755.693610][ T6233] usb 5-1: SerialNumber: syz
[  755.850891][T11029] netlink: 'syz.3.1751': attribute type 1 has an invalid length.
[  755.863690][T11029] netlink: 'syz.3.1751': attribute type 2 has an invalid length.
[  756.230822][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.581406][ T6233] usb 5-1: config 0 descriptor??
[  756.593873][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.611244][ T6233] usb 5-1: can't set config #0, error -71
[  756.618709][ T6233] usb 5-1: USB disconnect, device number 14
[  760.083119][ T4281] net_ratelimit: 2 callbacks suppressed
[  760.083139][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.110609][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.191076][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.229378][T11057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  761.244312][T11057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  761.252617][T11057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  761.829372][T11062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  761.837787][T11062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  761.845275][T11062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  762.150501][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.825410][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1761'.
[  763.765056][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.788043][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.807296][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.130452][   T41] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  765.991624][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.999893][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.190368][T11094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  766.204357][T11094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  766.212747][T11094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  766.220634][   T41] usb 5-1: Using ep0 maxpacket: 32
[  766.930396][   T41] usb 5-1: config 0 has no interfaces?
[  766.942558][   T41] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  766.966775][   T41] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  766.978297][   T41] usb 5-1: Product: syz
[  766.982772][   T41] usb 5-1: Manufacturer: syz
[  766.987506][   T41] usb 5-1: SerialNumber: syz
[  767.004853][   T41] usb 5-1: config 0 descriptor??
[  767.021428][   T41] usb 5-1: can't set config #0, error -71
[  767.045250][   T41] usb 5-1: USB disconnect, device number 15
[  767.054571][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.475135][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1775'.
[  767.628695][   T41] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  768.202782][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.282130][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.459846][   T41] usb 5-1: Using ep0 maxpacket: 16
[  769.198180][   T41] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  769.219415][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.228248][   T41] usb 5-1: Product: syz
[  769.239505][   T41] usb 5-1: Manufacturer: syz
[  769.244474][   T41] usb 5-1: SerialNumber: syz
[  769.251803][   T41] usb 5-1: config 0 descriptor??
[  769.270933][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.362250][   T41] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -110
[  770.482178][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.782668][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.887453][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.940573][    T7] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  771.190606][    T7] usb 4-1: Using ep0 maxpacket: 32
[  771.198923][    T7] usb 4-1: config 0 has no interfaces?
[  771.287908][    T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  771.444031][    T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  771.550982][    T7] usb 4-1: Product: syz
[  771.555227][    T7] usb 4-1: Manufacturer: syz
[  771.559869][    T7] usb 4-1: SerialNumber: syz
[  771.672295][T11147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  771.687936][T11147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  771.697160][T11147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  772.437993][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.447074][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.456177][    T7] usb 4-1: config 0 descriptor??
[  772.475347][ T3654] usb 5-1: USB disconnect, device number 16
[  772.771654][ T3654] usb 4-1: USB disconnect, device number 21
[  773.522493][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.646776][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'.
[  774.551215][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.470561][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.763125][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.826342][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.836781][T11180] input: syz0 as /devices/virtual/input/input15
[  776.877640][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.968886][T11194] jffs2: notice: (11194) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  777.160579][ T4281] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  777.390796][ T4281] usb 5-1: Using ep0 maxpacket: 16
[  777.419748][ T4281] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  777.575715][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.680778][ T4281] usb 5-1: Product: syz
[  777.700053][ T4281] usb 5-1: Manufacturer: syz
[  777.741042][ T4281] usb 5-1: SerialNumber: syz
[  777.797224][ T4281] usb 5-1: config 0 descriptor??
[  777.932190][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  777.940792][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  777.948891][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  778.210347][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.361694][ T4281] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  778.509545][ T4281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  778.535883][ T4281] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  778.544988][ T4281] usb 5-1: media controller created
[  778.563423][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.602311][ T4281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  778.651351][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.768551][ T4281] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  778.842134][T11213] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  779.582083][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.614638][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1804'.
[  779.617681][ T4281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  779.795170][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.818110][ T4281] usb 5-1: USB disconnect, device number 17
[  780.575402][ T4281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  780.871759][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.046166][T11230] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  781.911083][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.202621][T11237] input: syz0 as /devices/virtual/input/input16
[  782.368296][T11245] jffs2: notice: (11245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  782.631181][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.952260][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.413406][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  783.422062][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  783.429846][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  783.619924][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1818'.
[  783.648075][T11254] jffs2: notice: (11254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  783.975428][T11266] netlink: 'syz.4.1819': attribute type 1 has an invalid length.
[  783.990914][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.860503][   T41] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  785.070746][   T41] usb 4-1: Using ep0 maxpacket: 16
[  785.134011][   T41] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  785.249639][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.267614][   T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.275343][T11266] 8021q: adding VLAN 0 to HW filter on device bond6
[  785.981010][   T41] usb 4-1: Product: syz
[  785.995468][   T41] usb 4-1: Manufacturer: syz
[  786.005206][   T41] usb 4-1: SerialNumber: syz
[  786.020716][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.033117][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.042259][   T41] usb 4-1: config 0 descriptor??
[  786.395540][T11293] input: syz0 as /devices/virtual/input/input17
[  786.461499][   T41] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  787.219163][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.229093][   T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  787.239175][   T41] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  787.247329][   T41] usb 4-1: media controller created
[  787.254326][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.266498][   T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  787.312704][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.440877][   T41] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  787.586253][   T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  787.710632][   T41] usb 4-1: USB disconnect, device number 22
[  787.839528][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'.
[  787.865671][   T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  787.876652][T11309] jffs2: notice: (11309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  788.233854][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.111091][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.235589][T11327] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  789.271872][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.929021][T11331] netlink: 'syz.3.1838': attribute type 1 has an invalid length.
[  790.042680][T11331] 8021q: adding VLAN 0 to HW filter on device bond4
[  790.311694][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.407521][T11340] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  792.075709][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.150720][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.081250][T11357] jffs2: notice: (11357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  793.100165][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1845'.
[  793.111538][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.165612][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.333280][T11368] nvmet: adding nsid 1 to subsystem testnqn
[  794.630956][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.191209][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.199381][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.319288][T11374] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  795.559814][   T26] audit: type=1800 audit(1786189512.163:78): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1848" name="addr_trtype" dev="configfs" ino=62432 res=0 errno=0
[  795.661753][   T26] audit: type=1800 audit(1786189512.273:79): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1848" name="addr_traddr" dev="configfs" ino=62440 res=0 errno=0
[  795.727906][   T26] audit: type=1800 audit(1786189512.293:80): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1848" name="addr_trsvcid" dev="configfs" ino=62441 res=0 errno=0
[  795.888856][T11378] nvmet: transport type 0 not supported
[  795.986530][T11386] netlink: 'syz.5.1853': attribute type 1 has an invalid length.
[  796.000371][    T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  796.108275][T11386] 8021q: adding VLAN 0 to HW filter on device bond7
[  796.210554][    T7] usb 5-1: Using ep0 maxpacket: 32
[  796.230867][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.250587][T11395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  796.261347][    T7] usb 5-1: config 0 has no interfaces?
[  796.281711][T11395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  796.289909][T11395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  796.354530][    T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  796.469604][    T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  796.553567][    T7] usb 5-1: Product: syz
[  796.596629][    T7] usb 5-1: Manufacturer: syz
[  796.648510][    T7] usb 5-1: SerialNumber: syz
[  796.785671][    T7] usb 5-1: config 0 descriptor??
[  797.024803][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'.
[  797.056311][    T7] usb 5-1: USB disconnect, device number 18
[  797.271124][ T3654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.231289][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.311323][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.130541][    T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  799.350792][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.170416][    T7] usb 3-1: Using ep0 maxpacket: 16
[  800.199481][    T7] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  800.235228][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.261643][T11427] netlink: 'syz.6.1867': attribute type 1 has an invalid length.
[  800.272331][    T7] usb 3-1: Product: syz
[  800.276556][    T7] usb 3-1: Manufacturer: syz
[  800.289229][    T7] usb 3-1: SerialNumber: syz
[  800.309946][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'.
[  800.346100][    T7] usb 3-1: config 0 descriptor??
[  800.394747][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.409959][T11427] 8021q: adding VLAN 0 to HW filter on device bond7
[  800.779506][    T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  800.861575][T11439] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  801.610387][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.613494][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.627972][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.628851][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  801.650648][    T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  801.658790][    T7] usb 3-1: media controller created
[  801.688126][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  801.724666][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.772239][    T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  801.786997][    T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  802.074640][   T41] usb 3-1: USB disconnect, device number 12
[  802.176492][   T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  802.630641][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.750350][   T41] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  803.510577][   T41] usb 5-1: Using ep0 maxpacket: 32
[  803.521992][   T41] usb 5-1: config 0 has no interfaces?
[  803.549751][   T41] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  803.590344][   T41] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  803.598701][   T41] usb 5-1: Product: syz
[  803.609095][   T41] usb 5-1: Manufacturer: syz
[  803.616435][   T41] usb 5-1: SerialNumber: syz
[  804.400916][   T41] usb 5-1: config 0 descriptor??
[  804.456834][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1879'.
[  804.481189][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.490972][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.631414][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.645696][ T7886] usb 5-1: USB disconnect, device number 19
[  804.829086][T11472] netlink: 'syz.3.1881': attribute type 1 has an invalid length.
[  804.896390][T11472] 8021q: adding VLAN 0 to HW filter on device bond5
[  805.820428][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.163135][   T26] audit: type=1326 audit(1786189522.773:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.1885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d579e0d9 code=0x0
[  806.501899][T11499] netlink: 'syz.2.1886': attribute type 1 has an invalid length.
[  806.509787][T11499] netlink: 'syz.2.1886': attribute type 2 has an invalid length.
[  807.220654][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.661180][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'.
[  807.671989][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.231927][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.714485][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.721589][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.970470][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.710935][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.286979][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.466049][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.901620][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.914265][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.932855][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.155541][T11541] CIFS: iocharset name too long
[  814.477788][T11549] netlink: 'syz.2.1901': attribute type 1 has an invalid length.
[  814.486321][T11549] netlink: 'syz.2.1901': attribute type 2 has an invalid length.
[  814.950841][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.464535][T11552] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  815.672090][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'.
[  815.991383][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.030811][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.435475][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.443640][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.471126][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.685135][T11579] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  820.975081][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1912'.
[  821.228201][   T26] audit: type=1800 audit(1786189537.833:82): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1913" name="zoned" dev="configfs" ino=64209 res=0 errno=0
[  821.461913][   T26] audit: type=1800 audit(1786189537.863:83): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1913" name="power" dev="configfs" ino=64210 res=0 errno=0
[  821.517173][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.790868][   T26] audit: type=1800 audit(1786189537.873:84): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1913" name="power" dev="configfs" ino=64212 res=0 errno=0
[  822.038399][ T9124] smpboot: CPU 1 is now offline
[  823.771953][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.780864][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.792634][T11595] x86: Booting SMP configuration:
[  823.797925][T11595] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  823.836838][T11597] netlink: 'syz.2.1915': attribute type 1 has an invalid length.
[  823.844950][T11597] netlink: 'syz.2.1915': attribute type 2 has an invalid length.
[  823.856395][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.642512][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.857129][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1918'.
[  826.710532][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.792328][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.750535][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.790788][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.830775][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.839252][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.870529][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.910706][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.576113][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.584508][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.593562][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.638210][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.830260][    C0] sched: RT throttling activated
[  836.832359][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.853009][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.050404][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.910990][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.078813][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.631238][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.936783][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.969263][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.001770][T11656] input: syz0 as /devices/virtual/input/input18
[  843.990511][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.787708][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.990863][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.799390][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.177933][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.209648][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.930346][ T4437] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  851.120619][ T4437] usb 6-1: Using ep0 maxpacket: 32
[  851.127419][ T4437] usb 6-1: config 0 has no interfaces?
[  853.394633][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.403268][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.411781][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.479240][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.930202][ T4437] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  856.783493][ T4437] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  858.477305][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.501742][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.544855][ T4437] usb 6-1: config 0 descriptor??
[  858.585893][ T4437] usb 6-1: can't set config #0, error -71
[  858.612488][ T4437] usb 6-1: USB disconnect, device number 12
[  858.968175][T11716] device syzkaller0 entered promiscuous mode
[  859.160751][T11724] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1949'.
[  859.519617][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.851655][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.604820][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.876834][T11728] lo speed is unknown, defaulting to 1000
[  862.882926][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.033826][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.870534][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.179635][T11728] lo speed is unknown, defaulting to 1000
[  867.162631][T11728] lo speed is unknown, defaulting to 1000
[  868.196180][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.204499][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.369945][T11728] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  868.483813][T11728] lo speed is unknown, defaulting to 1000
[  868.491573][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.500065][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.541908][T11728] lo speed is unknown, defaulting to 1000
[  868.572278][T11728] lo speed is unknown, defaulting to 1000
[  868.604743][T11728] lo speed is unknown, defaulting to 1000
[  868.622787][T11728] lo speed is unknown, defaulting to 1000
[  869.300485][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.490453][ T7886] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  870.152718][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.159470][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  871.900420][ T7886] usb 4-1: Using ep0 maxpacket: 32
[  872.451484][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.460033][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.485624][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.862874][ T7886] usb 4-1: device descriptor read/all, error -71
[  876.037261][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.410761][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.976684][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.664937][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.991036][T11823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.999373][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.010434][T11822] netlink: 'syz.2.1967': attribute type 1 has an invalid length.
[  880.049081][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.388078][T11833] device bond6 entered promiscuous mode
[  880.432383][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'.
[  881.110891][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.653985][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.662640][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.672307][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.687793][T11833] syz.3.1972 (11833): attempted to duplicate a private mapping with mremap.  This is not supported.
[  884.718136][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.711449][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.980064][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.255558][T11859] 9pnet_virtio: no channels available for device syz
[  887.412300][   T26] audit: type=1326 audit(1786189604.023:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11861 comm="syz.5.1981" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1c659e0d9 code=0x0
[  890.137968][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.146692][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.329014][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.397624][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.190868][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.199446][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.946340][T11895] netlink: 'syz.6.1986': attribute type 1 has an invalid length.
[  894.630437][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  894.950687][ T7886] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  897.443537][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.452076][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.479892][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.518910][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.470615][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.362119][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.710382][ T9124] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  902.790741][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.824461][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.390330][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.570279][ T9124] usb 4-1: Using ep0 maxpacket: 8
[  906.146841][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.788265][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  908.470542][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.776653][ T9124] usb 4-1: device descriptor read/all, error -71
[  909.836564][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.879062][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.510757][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.288240][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.150609][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.181406][T11950] sctp: [Deprecated]: syz.3.2001 (pid 11950) Use of struct sctp_assoc_value in delayed_ack socket option.
[  913.181406][T11950] Use struct sctp_sack_info instead
[  913.226531][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.240124][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.250717][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.492305][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.891114][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.268686][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.290350][T11957] jffs2: notice: (11957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  916.310618][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.350835][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.893579][T11966] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  917.910702][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.519277][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.882314][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.893598][ T6174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.903072][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.917377][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.951192][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.973298][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.985426][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.997498][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  922.630925][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.030812][ T9212] net_ratelimit: 1 callbacks suppressed
[  925.030833][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.316166][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.390480][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.474529][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.483076][ T7344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.496367][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.524761][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.860803][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.869873][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.878664][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.593586][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.600026][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  932.519557][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.530593][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.038553][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.479543][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  934.494302][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  934.504344][T12029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  934.539231][T12029] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  934.548402][T12029] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  934.560800][T12029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  934.610406][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.664325][T12026] lo speed is unknown, defaulting to 1000
[  934.672323][T12026] lo speed is unknown, defaulting to 1000
[  934.880065][T12026] chnl_net:caif_netlink_parms(): no params data found
[  935.039285][T12026] bridge0: port 1(bridge_slave_0) entered blocking state
[  935.046584][T12026] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.055725][T12026] device bridge_slave_0 entered promiscuous mode
[  935.064944][T12026] bridge0: port 2(bridge_slave_1) entered blocking state
[  935.073774][T12026] bridge0: port 2(bridge_slave_1) entered disabled state
[  935.086619][T12026] device bridge_slave_1 entered promiscuous mode
[  935.326342][T12026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  935.417685][T12026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  935.733133][T12026] team0: Port device team_slave_0 added
[  935.786484][T12026] team0: Port device team_slave_1 added
[  936.630331][ T8661] Bluetooth: hci1: command 0x0409 tx timeout
[  936.744578][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.753545][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.710286][ T8661] Bluetooth: hci1: command 0x041b tx timeout
[  940.526883][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.536013][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.573628][T12026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  940.605217][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  940.677251][T12026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  940.716109][T12026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  940.726067][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  940.757279][T12026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  940.790291][T12029] Bluetooth: hci1: command 0x040f tx timeout
[  941.147771][T12026] device hsr_slave_0 entered promiscuous mode
[  941.164608][T12026] device hsr_slave_1 entered promiscuous mode
[  941.486044][T12026] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  941.537872][T12026] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  941.568036][T12056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.576380][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.588117][T12026] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  941.613704][T12060] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2027'.
[  942.870691][T12029] Bluetooth: hci1: command 0x0419 tx timeout
[  943.858651][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.880361][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.835635][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.532203][T12026] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  946.648135][T12026] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.668646][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  946.682996][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  946.696257][T12026] 8021q: adding VLAN 0 to HW filter on device team0
[  946.710122][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  946.728464][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  946.738094][T11885] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.745411][T11885] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.784324][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  946.795469][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  946.807650][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  946.824652][T11885] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.832538][T11885] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.851394][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  946.860297][ T9212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.882711][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  946.909127][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  946.963306][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.994182][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  947.021519][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  947.051859][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  947.084144][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  947.103014][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  947.134310][T12026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  947.165326][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  947.191020][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  947.199669][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  947.222255][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  947.303701][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.312214][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.421041][T12084] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2031'.
[  949.991144][T12093] siw: device registration error -23
[  950.455393][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.463901][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  953.916516][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  953.925231][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.468860][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.593648][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  954.609666][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  954.673685][T12026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.969959][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.637414][ T4854] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  955.719302][ T4854] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.108999][ T4854] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  956.181306][ T4854] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.412190][ T4854] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  956.459026][ T4854] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.706814][ T4854] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  956.781260][ T4854] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.395978][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.576032][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  959.592573][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  959.603669][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.706603][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  959.726522][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  959.787256][T12026] device veth0_vlan entered promiscuous mode
[  959.802291][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  959.824144][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  959.868753][T12026] device veth1_vlan entered promiscuous mode
[  960.578529][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.640569][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.663720][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  960.719091][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  961.000609][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  961.073245][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  961.648825][T12026] device veth0_macvtap entered promiscuous mode
[  961.693699][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  961.835585][T12026] device veth1_macvtap entered promiscuous mode
[  962.390867][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.457974][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  962.571451][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.646907][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  962.720105][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.799773][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  962.882619][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.981741][T12026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  963.039592][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  963.085947][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  963.181696][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.245717][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.319890][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.393560][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.479423][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.557610][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.623783][T12026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.643397][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  963.659824][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  963.738284][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.746745][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.756218][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.839207][ T4854] device hsr_slave_0 left promiscuous mode
[  963.865338][T12152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.106461][ T4854] device hsr_slave_1 left promiscuous mode
[  964.130838][T12152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.163102][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  964.163291][T12152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.177433][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  964.221330][ T4854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  964.242092][ T4854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  964.249312][   T26] audit: type=1800 audit(1786189680.853:86): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2043" name="memory_backed" dev="configfs" ino=67200 res=0 errno=0
[  964.283861][   T26] audit: type=1800 audit(1786189680.853:87): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2043" name="power" dev="configfs" ino=67201 res=0 errno=0
[  964.311075][ T4854] device bridge_slave_1 left promiscuous mode
[  964.317402][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.458892][ T4854] device bridge_slave_0 left promiscuous mode
[  964.473942][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.582427][ T4854] device veth1_macvtap left promiscuous mode
[  964.588758][ T4854] device veth0_macvtap left promiscuous mode
[  964.595175][ T4854] device veth1_vlan left promiscuous mode
[  964.604230][ T4854] device veth0_vlan left promiscuous mode
[  964.652429][T12151] net_ratelimit: 39 callbacks suppressed
[  964.652449][T12151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.679984][T12151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.699626][T12151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.714576][T12151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.723893][T12151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.815613][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.993216][T12174] 9pnet_virtio: no channels available for device syz
[  965.162931][ T4854] bond7 (unregistering): Released all slaves
[  965.366343][ T4854] bond6 (unregistering): Released all slaves
[  965.578244][ T4854] bond5 (unregistering): Released all slaves
[  965.805630][ T4854] bond4 (unregistering): Released all slaves
[  965.836692][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.995213][ T4854] bond3 (unregistering): Released all slaves
[  966.184909][ T4854] bond2 (unregistering): Released all slaves
[  966.367708][ T4854] bond1 (unregistering): Released all slaves
[  966.798635][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.895052][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.977673][ T4854] team0 (unregistering): Port device team_slave_1 removed
[  967.038173][ T4854] team0 (unregistering): Port device team_slave_0 removed
[  967.096325][ T4854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  967.157870][ T4854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  967.579238][ T4854] bond0 (unregistering): Released all slaves
[  967.688182][T12026] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  967.700384][T12026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  967.709823][T12026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  967.719386][T12026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.748015][T12160] netlink: 'syz.2.2043': attribute type 1 has an invalid length.
[  967.936859][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.959090][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  968.061542][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  968.109479][ T4758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  968.176797][ T4758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  968.193930][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  968.278201][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.238426][T12198] jffs2: notice: (12198) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  970.456219][T12198] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  970.907924][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.551233][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.920516][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  974.257916][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.193525][T12029] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  975.208083][T12029] Bluetooth: hci1: Injecting HCI hardware error event
[  975.221510][ T8661] Bluetooth: hci1: hardware error 0x00
[  975.379273][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.397441][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  977.431083][ T8661] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  978.713072][T12239] jffs2: notice: (12239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  979.817626][T12236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.120020][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.165996][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.488106][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.933929][T12239] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  982.958168][T12236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.026880][   T26] audit: type=1800 audit(1786189699.633:88): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2060" name="memory_backed" dev="configfs" ino=69330 res=0 errno=0
[  983.055261][T12267] netlink: 'syz.7.2060': attribute type 1 has an invalid length.
[  983.093590][   T26] audit: type=1800 audit(1786189699.663:89): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2060" name="power" dev="configfs" ino=69331 res=0 errno=0
[  983.163929][T12236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.250441][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.263500][T12236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.328416][T12267] 8021q: adding VLAN 0 to HW filter on device bond1
[  983.398633][T12236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.417989][T12236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.333124][T12279] device syzkaller0 entered promiscuous mode
[  987.341709][   T14] net_ratelimit: 3 callbacks suppressed
[  987.341722][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.867056][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2062'.
[  989.297772][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.298585][T12297] netlink: 'syz.7.2065': attribute type 13 has an invalid length.
[  989.307021][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.540528][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  989.622398][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  989.657147][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  990.310573][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.751347][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.762241][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.043687][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  993.050070][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  993.104688][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.837040][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.396179][T12338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.409538][T12338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.425966][T12338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.435626][T12338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.507709][T12339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.526728][T12339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  997.835696][T12352] net_ratelimit: 157 callbacks suppressed
[  997.835713][T12352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  997.850747][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  997.999606][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.152542][   T26] audit: type=1800 audit(1786189714.763:90): pid=12358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2079" name="zone_size" dev="configfs" ino=69775 res=0 errno=0
[  998.508561][T12029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  998.519940][T12029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  998.533120][T12029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  998.555904][T12029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  998.573047][T12029] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  998.590693][T12029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  998.875950][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.910315][ T7018] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  999.024787][ T8661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  999.037238][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.049440][ T8661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  999.071184][ T8661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  999.081591][ T8661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  999.098580][ T8661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  999.102078][ T7018] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  999.117500][ T8661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  999.118737][ T7018] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  999.135558][ T7018] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  999.146061][ T7018] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  999.199283][ T7018] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  999.216426][ T7018] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  999.225843][ T7018] usb 4-1: Product: syz
[  999.230052][ T7018] usb 4-1: Manufacturer: syz
[  999.249986][ T7018] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  999.762333][T12371] mmap: syz.3.2082 (12371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1000.076683][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.206493][ T4319] usb 4-1: USB disconnect, device number 27
[ 1000.630588][T12029] Bluetooth: hci4: command 0x0409 tx timeout
[ 1001.129580][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1001.190687][T12029] Bluetooth: hci5: command 0x0409 tx timeout
[ 1002.094574][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1002.712308][ T8661] Bluetooth: hci4: command 0x041b tx timeout
[ 1003.070391][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1003.104754][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1003.270468][ T8661] Bluetooth: hci5: command 0x041b tx timeout
[ 1003.834866][T12368] lo speed is unknown, defaulting to 1000
[ 1004.045023][T12368] lo speed is unknown, defaulting to 1000
[ 1004.151161][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1004.790349][ T8661] Bluetooth: hci4: command 0x040f tx timeout
[ 1004.809310][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.952003][T12363] lo speed is unknown, defaulting to 1000
[ 1005.118206][T12363] lo speed is unknown, defaulting to 1000
[ 1005.350844][ T8661] Bluetooth: hci5: command 0x040f tx timeout
[ 1005.395788][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.681532][T12380] jffs2: notice: (12380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1005.756178][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.145509][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.432088][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.440526][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.870499][ T8661] Bluetooth: hci4: command 0x0419 tx timeout
[ 1007.430755][ T8661] Bluetooth: hci5: command 0x0419 tx timeout
[ 1007.519012][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1008.269134][T12363] chnl_net:caif_netlink_parms(): no params data found
[ 1008.342356][T12368] chnl_net:caif_netlink_parms(): no params data found
[ 1009.520896][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.696404][T12363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.711990][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.721796][T12363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.749955][T12363] device bridge_slave_0 entered promiscuous mode
[ 1009.836452][T12368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.845080][T12368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.860726][T12419] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1009.894208][T12368] device bridge_slave_0 entered promiscuous mode
[ 1009.940626][T12419] CIFS: Unable to determine destination address
[ 1010.091450][T12363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.098706][T12363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.135358][T12363] device bridge_slave_1 entered promiscuous mode
[ 1010.156974][T12368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.170297][T12368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.184640][T12368] device bridge_slave_1 entered promiscuous mode
[ 1010.339574][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.383053][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.400504][   T14] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1010.433188][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.602814][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.916418][T12363] team0: Port device team_slave_0 added
[ 1010.920984][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1010.939792][T12368] team0: Port device team_slave_0 added
[ 1010.981738][T12363] team0: Port device team_slave_1 added
[ 1011.042729][T12368] team0: Port device team_slave_1 added
[ 1011.231546][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1011.238580][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1011.279848][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1011.317690][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1011.355568][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1011.390846][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1011.428179][   T11] device hsr_slave_0 left promiscuous mode
[ 1011.449433][   T11] device hsr_slave_1 left promiscuous mode
[ 1011.456961][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1011.473491][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.486791][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1011.498245][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1011.522573][   T11] device bridge_slave_1 left promiscuous mode
[ 1011.529093][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1011.548403][   T11] device bridge_slave_0 left promiscuous mode
[ 1011.556001][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.632910][   T11] device veth1_macvtap left promiscuous mode
[ 1011.648555][   T11] device veth0_macvtap left promiscuous mode
[ 1011.654815][   T11] device veth1_vlan left promiscuous mode
[ 1011.669980][   T11] device veth0_vlan left promiscuous mode
[ 1012.294729][   T11] bond2 (unregistering): Released all slaves
[ 1012.672160][   T11] bond1 (unregistering): Released all slaves
[ 1012.799343][   T11] team0 (unregistering): Port device geneve0 removed
[ 1013.563884][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.604709][   T14] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1013.645574][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.664860][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.696969][   T14] usb 4-1: config 0 descriptor??
[ 1013.734909][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.745238][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.753809][   T14] usb 4-1: can't set config #0, error -71
[ 1013.772972][   T14] usb 4-1: USB disconnect, device number 28
[ 1014.410979][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1014.702528][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1014.720611][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1014.943402][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1015.236700][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1016.260987][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.790679][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.365499][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1017.376759][   T11] bond0 (unregistering): Released all slaves
[ 1017.628661][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1017.636860][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.671927][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1017.734939][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1017.743041][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.849394][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1017.935943][T12447] lo speed is unknown, defaulting to 1000
[ 1019.987311][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.249910][T12368] device hsr_slave_0 entered promiscuous mode
[ 1020.305486][T12368] device hsr_slave_1 entered promiscuous mode
[ 1020.320439][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.368593][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1020.405553][T12368] Cannot create hsr debugfs directory
[ 1021.189797][T12447] lo speed is unknown, defaulting to 1000
[ 1021.402239][T12363] device hsr_slave_0 entered promiscuous mode
[ 1021.416446][T12470] jffs2: notice: (12470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1021.433394][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.445881][T12363] device hsr_slave_1 entered promiscuous mode
[ 1021.465595][T12363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1021.530031][T12363] Cannot create hsr debugfs directory
[ 1021.578532][T12447] lo speed is unknown, defaulting to 1000
[ 1024.262062][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.271251][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.289890][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.894400][T12368] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1025.039380][T12368] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1025.133705][T12368] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1025.157937][T12488] jffs2: notice: (12488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1025.248207][T12368] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1025.419695][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.634732][T12363] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1025.730481][T12363] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1025.812598][T12363] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1025.860062][T12447] infiniband syz1: set active
[ 1025.916065][T12447] infiniband syz1: added lo
[ 1025.959716][T12363] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1025.970556][T12447] rdma_rxe: unable to create cq
[ 1026.054490][    T7] lo speed is unknown, defaulting to 1000
[ 1026.069054][T12368] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.535198][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1026.607732][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1026.729396][T12368] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.905398][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1026.985485][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1027.084577][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.091877][ T4654] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.339026][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1027.401919][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1027.460977][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1027.505576][T12447] infiniband syz1: Couldn't create ib_mad CQ
[ 1027.525124][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.532497][ T4654] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.745611][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1027.858499][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1028.068175][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1028.127350][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.160359][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1028.304228][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1028.344016][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.381128][T12447] infiniband syz1: Couldn't open port 1
[ 1028.391251][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1028.441596][T12447] RDS/IB: syz1: added
[ 1028.446999][T12447] smc: adding ib device syz1 with port count 1
[ 1028.462135][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1028.478170][T12447] smc:    ib device syz1 port 1 has pnetid 
[ 1028.539167][   T14] lo speed is unknown, defaulting to 1000
[ 1028.545663][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1028.583300][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1028.611705][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1028.662599][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1028.698589][T12368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1028.718059][T12029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1028.731740][T12447] lo speed is unknown, defaulting to 1000
[ 1028.731771][T12029] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1028.746943][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1028.762713][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1028.773430][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1028.781698][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1028.801666][T12516] random: crng reseeded on system resumption
[ 1028.913391][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.981882][T12363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1028.996179][T12512] lo speed is unknown, defaulting to 1000
[ 1029.072794][T12512] lo speed is unknown, defaulting to 1000
[ 1029.361756][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.516319][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1029.596226][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1029.842181][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.030817][T12363] 8021q: adding VLAN 0 to HW filter on device team0
[ 1030.336266][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.571308][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1030.636027][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1030.747595][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1030.754895][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1030.870587][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[ 1030.959003][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1031.054084][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1031.158777][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1031.242697][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.250064][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1031.485916][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1031.609242][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1031.618381][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.636703][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1031.639016][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1031.793235][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1031.864927][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1031.957845][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1032.040983][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1032.110135][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1032.526521][T12363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1032.614602][T12363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1032.631261][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1032.676335][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1032.725232][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1032.811858][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1032.950375][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[ 1033.063028][T12512] lo speed is unknown, defaulting to 1000
[ 1033.195640][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1033.220626][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1033.251379][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1033.360782][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1033.610601][T12447] lo speed is unknown, defaulting to 1000
[ 1033.670560][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1035.030255][ T4289] Bluetooth: hci1: command 0x040f tx timeout
[ 1036.030751][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1036.039269][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1036.119333][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1036.151484][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1036.161153][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1036.962862][    T7] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1037.110406][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[ 1037.766528][T12447] lo speed is unknown, defaulting to 1000
[ 1037.772133][T12512] chnl_net:caif_netlink_parms(): no params data found
[ 1038.390328][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1038.530406][    T7] usb 4-1: Using ep0 maxpacket: 8
[ 1038.537807][    T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1038.585510][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1038.595687][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1038.605355][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1038.624712][T12368] device veth0_vlan entered promiscuous mode
[ 1038.683548][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1038.741435][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1038.750966][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1038.759947][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1038.767375][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1038.768482][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1038.794974][T12368] device veth1_vlan entered promiscuous mode
[ 1038.828777][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1038.838730][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1038.853207][T12447] lo speed is unknown, defaulting to 1000
[ 1038.860524][T12512] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1038.868024][T12512] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1038.896925][T12512] device bridge_slave_0 entered promiscuous mode
[ 1038.904218][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1038.931531][T12512] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1038.939459][T12512] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1038.944356][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.974684][T12512] device bridge_slave_1 entered promiscuous mode
[ 1039.005722][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1039.028029][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1039.072651][T12368] device veth0_macvtap entered promiscuous mode
[ 1039.110979][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.153245][T12368] device veth1_macvtap entered promiscuous mode
[ 1039.179507][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.205466][T12512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1039.209750][    T7] usb 4-1: GET_CAPABILITIES returned 0
[ 1039.239054][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1039.240329][    T7] usbtmc 4-1:16.0: can't read capabilities
[ 1039.318931][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1039.380372][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1039.438498][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1039.456901][   T14] usb 4-1: USB disconnect, device number 29
[ 1039.465646][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.474648][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1039.513084][T12512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1039.553742][T12447] lo speed is unknown, defaulting to 1000
[ 1039.553828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1039.587637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1039.616660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1039.645182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1039.675107][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1039.698565][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1039.719900][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1039.751349][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1039.781547][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1039.804041][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1039.822745][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1039.900779][T12512] team0: Port device team_slave_0 added
[ 1039.932653][T12368] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.960721][T12368] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.020289][T12368] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.029669][T12368] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.153838][T12512] team0: Port device team_slave_1 added
[ 1040.159983][T12447] lo speed is unknown, defaulting to 1000
[ 1040.241661][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1040.261683][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1040.328255][T12512] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1040.339572][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1040.460414][T12512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1040.516866][T12512] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1040.525407][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1040.551012][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1040.660587][T12512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1040.752639][T12363] device veth0_vlan entered promiscuous mode
[ 1040.772288][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1040.789816][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1040.873107][T12363] device veth1_vlan entered promiscuous mode
[ 1040.880324][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1040.888379][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1040.924718][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1041.077606][   T11] device hsr_slave_0 left promiscuous mode
[ 1041.098596][   T11] device hsr_slave_1 left promiscuous mode
[ 1041.119005][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1041.170471][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.196764][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1041.230323][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1041.267619][   T11] device bridge_slave_1 left promiscuous mode
[ 1041.300430][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.321321][   T11] device bridge_slave_0 left promiscuous mode
[ 1041.327804][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.338730][T12626] random: crng reseeded on system resumption
[ 1041.431010][   T11] device veth1_macvtap left promiscuous mode
[ 1041.437298][   T11] device veth0_macvtap left promiscuous mode
[ 1041.460070][   T11] device veth1_vlan left promiscuous mode
[ 1041.466422][   T11] device veth0_vlan left promiscuous mode
[ 1041.592129][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.151612][   T11] bond1 (unregistering): Released all slaves
[ 1042.240463][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.658268][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.949862][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1042.958836][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.016542][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1043.078891][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1043.131651][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1043.579542][   T11] bond0 (unregistering): Released all slaves
[ 1043.681791][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.705130][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1043.787075][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1043.796499][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1043.812723][T12512] device hsr_slave_0 entered promiscuous mode
[ 1043.819660][T12512] device hsr_slave_1 entered promiscuous mode
[ 1043.842940][T12363] device veth0_macvtap entered promiscuous mode
[ 1043.922820][T12363] device veth1_macvtap entered promiscuous mode
[ 1043.974005][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1044.023176][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1044.055632][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1044.074558][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1044.155073][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1044.632474][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1044.664785][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1044.702784][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1044.720557][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.742899][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1044.831525][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1044.923309][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.025310][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1045.189291][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1045.263299][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1045.338486][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1045.540470][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1045.653593][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.766964][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1045.834443][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.926276][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1046.005122][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1046.075886][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1046.290065][T12363] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.358878][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.383465][T12363] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.506737][T12363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.603802][T12363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.260562][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.618698][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.737978][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.746284][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.639834][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.311258][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.950293][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1051.051424][T11460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.085156][T11460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.383282][T12681] random: crng reseeded on system resumption
[ 1051.409530][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1051.504004][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.564993][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.663319][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1051.956810][T12512] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1051.965566][T12697] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2078'.
[ 1052.000689][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.040042][T12512] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1052.178470][T12701] siw: device registration error -23
[ 1052.780543][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.809417][T12512] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1052.886796][T12703] netlink: 'syz.3.2136': attribute type 3 has an invalid length.
[ 1053.037194][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.126841][T12710] No buffer was provided with the request
[ 1053.134753][T12512] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1053.360568][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.881057][T12512] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1054.102651][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.104477][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1054.152521][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1054.194566][T12512] 8021q: adding VLAN 0 to HW filter on device team0
[ 1054.293801][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1054.315769][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1054.359875][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.367205][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1054.481239][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1054.483796][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.495335][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.501170][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1054.515460][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1054.583505][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.590849][ T7210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1054.646803][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1054.679254][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1054.724834][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1054.763596][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1054.784800][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1056.196193][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.663378][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.672928][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1056.807804][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1056.952339][T12744] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[ 1057.024491][T12512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1057.046947][T12512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1057.063635][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1057.084424][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1057.110873][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1057.148986][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1057.158714][T12750] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2147'.
[ 1057.181188][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1057.275155][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.295202][T12754] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2148'.
[ 1057.404043][T12755] siw: device registration error -23
[ 1058.400680][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.607766][T12769] random: crng reseeded on system resumption
[ 1058.827728][T12780] sctp: [Deprecated]: syz.9.2154 (pid 12780) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1058.827728][T12780] Use struct sctp_sack_info instead
[ 1058.917498][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1058.933418][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1058.977673][T12512] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1059.079483][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1059.109679][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1059.144640][   T11] device hsr_slave_0 left promiscuous mode
[ 1059.174318][   T11] device hsr_slave_1 left promiscuous mode
[ 1059.199465][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1059.223561][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1059.247406][   T11] device bridge_slave_1 left promiscuous mode
[ 1059.269098][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.304242][   T11] device bridge_slave_0 left promiscuous mode
[ 1059.319830][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.366394][   T11] infiniband syz1: set down
[ 1059.430826][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.586923][T12790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.596289][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.670513][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.017272][   T11] bond6 (unregistering): Released all slaves
[ 1062.005857][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.150637][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.720603][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.945097][   T11] bond5 (unregistering): Released all slaves
[ 1063.050121][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1063.333470][T12812] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2161'.
[ 1065.059791][   T11] bond4 (unregistering): Released all slaves
[ 1065.649750][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.750712][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1066.464248][   T11] bond3 (unregistering): Released all slaves
[ 1066.740623][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1066.833680][   T11] bond2 (unregistering): Released all slaves
[ 1066.850069][   T11] bond1 (unregistering): Released all slaves
[ 1067.002145][   T11] team0 (unregistering): Port device geneve0 removed
[ 1067.235084][T12834] random: crng reseeded on system resumption
[ 1067.369378][T12837] sctp: [Deprecated]: syz.6.2168 (pid 12837) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1067.369378][T12837] Use struct sctp_sack_info instead
[ 1067.759132][T12839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.767814][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.783786][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.870353][ T4322] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1068.466461][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1068.822589][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1069.176780][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1069.569894][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1070.736337][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1071.028521][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1071.232673][ T4322] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1071.260295][ T4322] usb 7-1: can't read configurations, error -71
[ 1071.503218][   T11] bond0 (unregistering): Released all slaves
[ 1071.710875][T12743] smc: removing ib device syz1
[ 1071.741582][T12704] lo speed is unknown, defaulting to 1000
[ 1071.775333][T12795] netlink: 'syz.8.2158': attribute type 3 has an invalid length.
[ 1071.783915][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.057817][T12860] device batadv1 entered promiscuous mode
[ 1072.070937][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.620293][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1072.630032][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1072.748075][T12512] device veth0_vlan entered promiscuous mode
[ 1072.760571][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1072.838388][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1072.875410][T12512] device veth1_vlan entered promiscuous mode
[ 1072.946128][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1072.996365][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1073.092163][T12881] random: crng reseeded on system resumption
[ 1073.110678][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.183234][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1073.225503][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1073.286345][T12512] device veth0_macvtap entered promiscuous mode
[ 1073.516333][T12512] device veth1_macvtap entered promiscuous mode
[ 1073.750807][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1074.267903][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1074.441316][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1074.611352][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1074.805032][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1075.035271][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1075.196728][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1075.449242][T12512] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1075.589863][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1075.672491][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1075.872872][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1076.008609][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1076.241938][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.420884][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1076.462338][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.686798][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1076.800744][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1076.850759][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1076.998496][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1077.139194][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1077.249259][T12512] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1077.320861][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1077.346708][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1077.394318][T12512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.436157][T12512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.464054][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1077.480435][T12512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.489875][T12512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.594724][T12907] netlink: 'syz.6.2184': attribute type 3 has an invalid length.
[ 1077.856266][T11885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1077.875466][T11885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1077.954697][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1078.037153][T11460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1078.062081][T11460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.069766][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1078.089073][T12928] 
[ 1078.091473][T12928] ======================================================
[ 1078.098621][T12928] WARNING: possible circular locking dependency detected
[ 1078.105674][T12928] syzkaller #0 Not tainted
[ 1078.110390][T12928] ------------------------------------------------------
[ 1078.117524][T12928] syz.9.2188/12928 is trying to acquire lock:
[ 1078.123591][T12928] ffff88802358dfb0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430
[ 1078.135179][T12928] 
[ 1078.135179][T12928] but task is already holding lock:
[ 1078.142543][T12928] ffff888077ebf520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580
[ 1078.151656][T12928] 
[ 1078.151656][T12928] which lock already depends on the new lock.
[ 1078.151656][T12928] 
[ 1078.162258][T12928] 
[ 1078.162258][T12928] the existing dependency chain (in reverse order) is:
[ 1078.171458][T12928] 
[ 1078.171458][T12928] -> #3 (&opts->dep_lock){+.+.}-{3:3}:
[ 1078.179230][T12928]        __mutex_lock+0x12d/0xae0
[ 1078.184291][T12928]        usbg_make_tpg+0x144/0x580
[ 1078.189411][T12928]        target_fabric_make_tpg+0xa0/0x6d0
[ 1078.195415][T12928]        configfs_mkdir+0x511/0x9e0
[ 1078.200651][T12928]        vfs_mkdir+0x386/0x570
[ 1078.205757][T12928]        do_mkdirat+0x1d8/0x440
[ 1078.210703][T12928]        __x64_sys_mkdir+0x6a/0x80
[ 1078.215907][T12928]        do_syscall_64+0x4c/0xa0
[ 1078.220977][T12928]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1078.227549][T12928] 
[ 1078.227549][T12928] -> #2 (tpg_instances_lock){+.+.}-{3:3}:
[ 1078.235760][T12928]        __mutex_lock+0x12d/0xae0
[ 1078.241117][T12928]        usbg_make_tpg+0xf4/0x580
[ 1078.246273][T12928]        target_fabric_make_tpg+0xa0/0x6d0
[ 1078.252086][T12928]        configfs_mkdir+0x511/0x9e0
[ 1078.257303][T12928]        vfs_mkdir+0x386/0x570
[ 1078.262074][T12928]        do_mkdirat+0x1d8/0x440
[ 1078.267015][T12928]        __x64_sys_mkdir+0x6a/0x80
[ 1078.272259][T12928]        do_syscall_64+0x4c/0xa0
[ 1078.277225][T12928]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1078.283754][T12928] 
[ 1078.283754][T12928] -> #1 (&subsys->su_mutex){+.+.}-{3:3}:
[ 1078.292221][T12928]        __mutex_lock+0x12d/0xae0
[ 1078.297539][T12928]        configfs_rmdir+0x638/0x980
[ 1078.302844][T12928]        vfs_rmdir+0x34e/0x4a0
[ 1078.307701][T12928]        do_rmdir+0x29a/0x5c0
[ 1078.312472][T12928]        __x64_sys_rmdir+0x45/0x50
[ 1078.317691][T12928]        do_syscall_64+0x4c/0xa0
[ 1078.322653][T12928]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1078.329872][T12928] 
[ 1078.329872][T12928] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}:
[ 1078.338594][T12928]        __lock_acquire+0x2d18/0x7c40
[ 1078.344090][T12928]        lock_acquire+0x1bb/0x4a0
[ 1078.349134][T12928]        down_write+0x36/0x60
[ 1078.353901][T12928]        configfs_depend_item_unlocked+0x14f/0x430
[ 1078.360483][T12928]        usbg_make_tpg+0x1f3/0x580
[ 1078.365803][T12928]        target_fabric_make_tpg+0xa0/0x6d0
[ 1078.371636][T12928]        configfs_mkdir+0x511/0x9e0
[ 1078.376849][T12928]        vfs_mkdir+0x386/0x570
[ 1078.381762][T12928]        do_mkdirat+0x1d8/0x440
[ 1078.386640][T12928]        __x64_sys_mkdir+0x6a/0x80
[ 1078.391779][T12928]        do_syscall_64+0x4c/0xa0
[ 1078.396842][T12928]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1078.403546][T12928] 
[ 1078.403546][T12928] other info that might help us debug this:
[ 1078.403546][T12928] 
[ 1078.413973][T12928] Chain exists of:
[ 1078.413973][T12928]   &sb->s_type->i_mutex_key#25 --> tpg_instances_lock --> &opts->dep_lock
[ 1078.413973][T12928] 
[ 1078.428630][T12928]  Possible unsafe locking scenario:
[ 1078.428630][T12928] 
[ 1078.437409][T12928]        CPU0                    CPU1
[ 1078.442791][T12928]        ----                    ----
[ 1078.448156][T12928]   lock(&opts->dep_lock);
[ 1078.452782][T12928]                                lock(tpg_instances_lock);
[ 1078.460943][T12928]                                lock(&opts->dep_lock);
[ 1078.467977][T12928]   lock(&sb->s_type->i_mutex_key#25);
[ 1078.473537][T12928] 
[ 1078.473537][T12928]  *** DEADLOCK ***
[ 1078.473537][T12928] 
[ 1078.481678][T12928] 5 locks held by syz.9.2188/12928:
[ 1078.486873][T12928]  #0: ffff88801abe2460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[ 1078.496145][T12928]  #1: ffff888051dd8150 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[ 1078.507149][T12928]  #2: ffffffff8d4e96b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0
[ 1078.517029][T12928]  #3: ffffffff8d8089e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580
[ 1078.526886][T12928]  #4: ffff888077ebf520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580
[ 1078.536390][T12928] 
[ 1078.536390][T12928] stack backtrace:
[ 1078.542281][T12928] CPU: 0 PID: 12928 Comm: syz.9.2188 Not tainted syzkaller #0
[ 1078.549744][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1078.559919][T12928] Call Trace:
[ 1078.563318][T12928]  <TASK>
[ 1078.566273][T12928]  dump_stack_lvl+0x188/0x24e
[ 1078.570990][T12928]  ? load_image+0x410/0x410
[ 1078.575511][T12928]  ? show_regs_print_info+0x12/0x12
[ 1078.580895][T12928]  ? print_circular_bug+0x12b/0x1a0
[ 1078.586196][T12928]  check_noncircular+0x296/0x330
[ 1078.591230][T12928]  ? look_up_lock_class+0x75/0x140
[ 1078.596349][T12928]  ? add_chain_block+0x9b0/0x9b0
[ 1078.601385][T12928]  ? lockdep_lock+0xf1/0x1f0
[ 1078.605985][T12928]  ? _find_first_zero_bit+0xd2/0x100
[ 1078.611367][T12928]  __lock_acquire+0x2d18/0x7c40
[ 1078.616234][T12928]  ? __kernel_text_address+0x9/0x30
[ 1078.621500][T12928]  ? verify_lock_unused+0x140/0x140
[ 1078.626721][T12928]  ? __mutex_trylock_common+0x15c/0x260
[ 1078.632290][T12928]  lock_acquire+0x1bb/0x4a0
[ 1078.636804][T12928]  ? configfs_depend_item_unlocked+0x14f/0x430
[ 1078.642973][T12928]  ? __might_sleep+0xd0/0xd0
[ 1078.647626][T12928]  ? read_lock_is_recursive+0x10/0x10
[ 1078.653358][T12928]  ? __mutex_trylock_common+0x15c/0x260
[ 1078.658908][T12928]  ? usbg_make_tpg+0x144/0x580
[ 1078.663767][T12928]  ? mutex_lock_nested+0x10/0x10
[ 1078.669114][T12928]  down_write+0x36/0x60
[ 1078.673452][T12928]  ? configfs_depend_item_unlocked+0x14f/0x430
[ 1078.679820][T12928]  configfs_depend_item_unlocked+0x14f/0x430
[ 1078.685840][T12928]  usbg_make_tpg+0x1f3/0x580
[ 1078.690461][T12928]  ? configfs_mkdir+0x4b5/0x9e0
[ 1078.695333][T12928]  ? usbg_drop_tport+0x20/0x20
[ 1078.700144][T12928]  ? vscnprintf+0x80/0x80
[ 1078.704496][T12928]  ? __kmem_cache_alloc_node+0x19d/0x270
[ 1078.710234][T12928]  target_fabric_make_tpg+0xa0/0x6d0
[ 1078.715793][T12928]  ? target_fabric_release_wwn+0xa0/0xa0
[ 1078.721882][T12928]  configfs_mkdir+0x511/0x9e0
[ 1078.726687][T12928]  vfs_mkdir+0x386/0x570
[ 1078.731025][T12928]  do_mkdirat+0x1d8/0x440
[ 1078.735535][T12928]  ? vfs_mkdir+0x570/0x570
[ 1078.740141][T12928]  ? getname_flags+0x206/0x500
[ 1078.745348][T12928]  __x64_sys_mkdir+0x6a/0x80
[ 1078.750147][T12928]  do_syscall_64+0x4c/0xa0
[ 1078.754693][T12928]  ? clear_bhb_loop+0x60/0xb0
[ 1078.759386][T12928]  ? clear_bhb_loop+0x60/0xb0
[ 1078.764078][T12928]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1078.769980][T12928] RIP: 0033:0x7fac1979e0d9
[ 1078.774439][T12928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1078.794406][T12928] RSP: 002b:00007fac1a6c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1078.802924][T12928] RAX: ffffffffffffffda RBX: 00007fac19a25fa0 RCX: 00007fac1979e0d9
[ 1078.810997][T12928] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600
[ 1078.819147][T12928] RBP: 00007fac19835024 R08: 0000000000000000 R09: 0000000000000000
[ 1078.827219][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1078.835207][T12928] R13: 00007fac19a26038 R14: 00007fac19a25fa0 R15: 00007ffec6f86bb8
[ 1078.843191][T12928]  </TASK>
[ 1078.868281][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1078.963940][T12928] Rounding down aligned max_sectors from 4294967295 to 4294967288
[ 1079.840961][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.913199][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1080.963357][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.350431][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.359831][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.368736][  T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.378386][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.993910][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.870520][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1084.082989][ T4322] net_ratelimit: 1 callbacks suppressed
[ 1084.083020][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.112812][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.910406][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.160465][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1087.112674][T11460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1087.124061][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1087.132990][T12191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1087.193141][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog