0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

[  317.910883][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.920111][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.631296][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.640873][T12028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:03 executing program 4:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:04 executing program 4:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:05 executing program 4:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

[  321.679771][T12028] net_ratelimit: 7 callbacks suppressed
[  321.679791][T12028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.694060][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.831051][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.922525][ T1214] ieee802154 phy0 wpan0: encryption failed: -22
[  321.928930][ T1214] ieee802154 phy1 wpan1: encryption failed: -22
01:28:06 executing program 4:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

[  322.073777][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.871152][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:07 executing program 4:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

[  323.110922][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.131601][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.910995][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.152094][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.721112][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:09 executing program 3:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:09 executing program 0:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:10 executing program 5:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:10 executing program 1:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:10 executing program 2:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:10 executing program 4:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

[  327.037537][ T6248] net_ratelimit: 18 callbacks suppressed
[  327.037558][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.271040][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.752158][ T5155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.760488][ T5155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.071070][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.311196][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.111048][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.351107][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.158160][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.230788][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:16 executing program 0:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:16 executing program 1:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:16 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0xfffffe3e)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)

[  332.042382][T12115] net_ratelimit: 7 callbacks suppressed
[  332.042402][T12115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.056510][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:16 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0xfffffe3e)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)

[  332.135399][T12115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.143947][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:16 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0xfffffe3e)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)

[  332.269773][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:17 executing program 3:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000f01000d00002e"], &(0x7f00000005c0)=""/212, 0x27, 0xd4, 0x1}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xd0001, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)

01:28:17 executing program 3:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000f01000d00002e"], &(0x7f00000005c0)=""/212, 0x27, 0xd4, 0x1}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xd0001, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)

[  332.490963][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:17 executing program 3:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000f01000d00002e"], &(0x7f00000005c0)=""/212, 0x27, 0xd4, 0x1}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xd0001, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)

[  333.270963][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.511674][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.841153][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.850952][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:18 executing program 5:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:18 executing program 0:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000f01000d00002e"], &(0x7f00000005c0)=""/212, 0x27, 0xd4, 0x1}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xd0001, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)

01:28:18 executing program 2:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:19 executing program 0:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000f01000d00002e"], &(0x7f00000005c0)=""/212, 0x27, 0xd4, 0x1}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xd0001, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)

01:28:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 1:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

01:28:20 executing program 0:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000f01000d00002e"], &(0x7f00000005c0)=""/212, 0x27, 0xd4, 0x1}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xd0001, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)

01:28:20 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42)

01:28:20 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

01:28:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:20 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

01:28:21 executing program 1:
unshare(0x40000000)
unshare(0x10000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10)
unshare(0x24010680)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000200))
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20044080, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
shutdown(r0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xfc000000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4004004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xffffffff}, 0x1c)
unshare(0x40000000)

01:28:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:21 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42)

01:28:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x2c, 0x0, "b65b98f42c9b2f1adfa263fbd920ecc998183baf23e148fbc895227b6c793ec16a7597b9633c16f47adab56b10111052795d363ea562e484cd1a66fe1f2aae798d03603a8f9837c69b57e016b04e579a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "34d9ebcb44e33adb8f8783973c3833d22e47f207d5db000000006a7835b9753518fdffffff4f24db767a214856f3622b95c5d18a01cf8809387e1a5cdfe604db6500000000000000004200"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "632c4ac89b9a81079744bb763cfe3a042663b26d3f241279dcd80f599a5007a05750ebea89dea0ce29e4ba99d9ca4cb7ab71c21a4578d0e0a80862fb0fc95c620b3549bf50ddc24f112695b6647a992c"}, 0xd8)

01:28:21 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

01:28:21 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42)

01:28:21 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42)

01:28:21 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x201}, 0x14}}, 0x0)

01:28:21 executing program 0:
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ab60d7", 0x9c, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x300, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d3873c05ea96de437fa11e614f962b1cef3bfc0ecee8ef98a6d2a41c17c55d8b", "41af55adbabd96816e7df435a97b76284103f7a20970ad0193cac80654ac063eac0dc5a5ea7372a97f1b958279507c0a", "6b8b30a3d3010000000000000076ecf589e2d721c10af1ce878079de", {"a875f81ad13eb76f98a2dae94f27988d", "5017f566218632b9e2d12edb931091c0"}}}}}}}}, 0x0)

01:28:21 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

01:28:21 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

01:28:21 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000840)={'wlan0\x00'})

01:28:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x201}, 0x14}}, 0x0)

01:28:21 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:21 executing program 0:
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ab60d7", 0x9c, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x300, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d3873c05ea96de437fa11e614f962b1cef3bfc0ecee8ef98a6d2a41c17c55d8b", "41af55adbabd96816e7df435a97b76284103f7a20970ad0193cac80654ac063eac0dc5a5ea7372a97f1b958279507c0a", "6b8b30a3d3010000000000000076ecf589e2d721c10af1ce878079de", {"a875f81ad13eb76f98a2dae94f27988d", "5017f566218632b9e2d12edb931091c0"}}}}}}}}, 0x0)

01:28:21 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:21 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

01:28:21 executing program 0:
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ab60d7", 0x9c, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x300, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d3873c05ea96de437fa11e614f962b1cef3bfc0ecee8ef98a6d2a41c17c55d8b", "41af55adbabd96816e7df435a97b76284103f7a20970ad0193cac80654ac063eac0dc5a5ea7372a97f1b958279507c0a", "6b8b30a3d3010000000000000076ecf589e2d721c10af1ce878079de", {"a875f81ad13eb76f98a2dae94f27988d", "5017f566218632b9e2d12edb931091c0"}}}}}}}}, 0x0)

01:28:21 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000840)={'wlan0\x00'})

01:28:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x201}, 0x14}}, 0x0)

01:28:21 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:21 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

01:28:21 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:21 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000840)={'wlan0\x00'})

01:28:21 executing program 0:
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ab60d7", 0x9c, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x300, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d3873c05ea96de437fa11e614f962b1cef3bfc0ecee8ef98a6d2a41c17c55d8b", "41af55adbabd96816e7df435a97b76284103f7a20970ad0193cac80654ac063eac0dc5a5ea7372a97f1b958279507c0a", "6b8b30a3d3010000000000000076ecf589e2d721c10af1ce878079de", {"a875f81ad13eb76f98a2dae94f27988d", "5017f566218632b9e2d12edb931091c0"}}}}}}}}, 0x0)

01:28:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x201}, 0x14}}, 0x0)

01:28:21 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:22 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000840)={'wlan0\x00'})

[  337.431609][ T5160] net_ratelimit: 26 callbacks suppressed
[  337.431626][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:22 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)

01:28:22 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000008d80)={<r1=>0x0}, &(0x7f0000008e80)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r1}, &(0x7f0000001980)=0x8)

01:28:22 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:22 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)

01:28:22 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

[  337.671044][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:22 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:22 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)

01:28:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:22 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:22 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)

01:28:22 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:22 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:22 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:22 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:23 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:23 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:23 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:23 executing program 3:
syz_emit_ethernet(0x2b, &(0x7f0000000340)={@random="b9296a2d7af3", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast2, 'u'}}}}}, 0x0)

01:28:23 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

01:28:23 executing program 3:
syz_emit_ethernet(0x2b, &(0x7f0000000340)={@random="b9296a2d7af3", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast2, 'u'}}}}}, 0x0)

[  338.489328][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.551648][T12302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
01:28:23 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:23 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

01:28:23 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

01:28:23 executing program 3:
syz_emit_ethernet(0x2b, &(0x7f0000000340)={@random="b9296a2d7af3", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast2, 'u'}}}}}, 0x0)

01:28:23 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000080))

[  338.684450][T12302] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  338.711115][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.949187][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
01:28:23 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:23 executing program 3:
syz_emit_ethernet(0x2b, &(0x7f0000000340)={@random="b9296a2d7af3", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast2, 'u'}}}}}, 0x0)

01:28:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:23 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f000000a780), 0x80800)
socket$alg(0x26, 0x5, 0x0)

01:28:23 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

01:28:23 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

01:28:23 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

01:28:24 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

01:28:24 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

[  339.535022][T12349] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  339.564826][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:24 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f000000a780), 0x80800)
socket$alg(0x26, 0x5, 0x0)

[  339.630343][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  339.752878][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:24 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

01:28:24 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x1000000}})

[  339.829834][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
01:28:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[  339.911259][T11969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.921266][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:24 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x60}}, 0x0)

[  340.050374][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
01:28:24 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f000000a780), 0x80800)
socket$alg(0x26, 0x5, 0x0)

[  340.125609][T12370] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  340.172395][T12378] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  340.185885][T12380] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
01:28:24 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f000000a780), 0x80800)
socket$alg(0x26, 0x5, 0x0)

01:28:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[  340.421947][T12376] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
01:28:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:25 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[  340.632449][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:25 executing program 5:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  340.791046][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:25 executing program 5:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  340.954818][T12410] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
01:28:25 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x60}}, 0x0)

01:28:25 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:25 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x60}}, 0x0)

01:28:25 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x60}}, 0x0)

01:28:25 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000024000b0f000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c00270d08000000ff03000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c00000008000100753332"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00\'\r\x00'/20, @ANYRES32=r5], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

01:28:25 executing program 5:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.206841][T12424] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[  341.242439][T12435] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
01:28:25 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.372801][T12444] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
01:28:26 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:26 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:26 executing program 5:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.591242][T12446] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
01:28:26 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.649411][T12449] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
01:28:26 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.695250][T12455] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
01:28:26 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:26 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.811540][T12460] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
01:28:26 executing program 1:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  341.898012][T12464] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[  341.927353][T12469] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
01:28:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

01:28:26 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:26 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:26 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

[  342.157100][   T27] audit: type=1804 audit(1679448506.735:166): pid=12488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/393/cgroup.controllers" dev="sda1" ino=1156 res=1 errno=0
01:28:26 executing program 4:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

01:28:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

01:28:27 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

01:28:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

01:28:27 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

01:28:27 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x1000000000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x651d}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5364, @empty, 0x90000001}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x87, r5, 0xee00}, {0x9, 0x6, 0x2230, 0x9, 0x0, 0x1, 0xffffffff}, {0x7f, 0x0, 0x8000000000000001}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev, 0x4d3, 0x52146362cd06b0d7}, 0x2, @in6=@remote, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f}}, 0xe8)

01:28:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

[  342.689901][T12519] xt_limit: Overflow, try lower: 1241513984/7
[  342.710899][ T5160] net_ratelimit: 3 callbacks suppressed
[  342.710917][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.734483][   T27] audit: type=1804 audit(1679448507.315:167): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/410/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0
[  342.803169][T12519] vlan0: entered allmulticast mode
[  342.866258][   T27] audit: type=1804 audit(1679448507.325:168): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/440/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
[  342.871193][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.955981][T12523] team_slave_0: entered promiscuous mode
[  342.961240][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.962132][T12523] team_slave_1: entered promiscuous mode
[  342.970356][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.004686][   T27] audit: type=1804 audit(1679448507.585:169): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/394/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0
[  343.053710][T12523] vlan0: entered promiscuous mode
[  343.068109][T12523] team0: entered promiscuous mode
[  343.096311][T12523] vlan0: entered allmulticast mode
[  343.118664][T12523] team0: entered allmulticast mode
01:28:27 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  343.145135][T12523] team_slave_0: entered allmulticast mode
[  343.170781][T12523] team_slave_1: entered allmulticast mode
[  343.221318][T12523] team0: left allmulticast mode
[  343.226354][T12523] team_slave_0: left allmulticast mode
01:28:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  343.262575][T12523] team_slave_1: left allmulticast mode
[  343.297860][T12523] team0: left promiscuous mode
01:28:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

[  343.311078][T12523] team_slave_0: left promiscuous mode
[  343.316584][T12523] team_slave_1: left promiscuous mode
[  343.429392][   T27] audit: type=1804 audit(1679448508.005:170): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/411/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
01:28:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  343.530859][   T27] audit: type=1804 audit(1679448508.105:171): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/395/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0
01:28:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

01:28:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  343.729147][T12545] xt_limit: Overflow, try lower: 1241513984/7
[  343.751069][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

[  343.809800][T12548] xt_limit: Overflow, try lower: 1241513984/7
[  343.827553][T12546] vlan0: entered allmulticast mode
01:28:28 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  343.862122][   T27] audit: type=1804 audit(1679448508.445:172): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/441/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
[  343.911173][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  343.984527][T12545] team_slave_0: entered promiscuous mode
[  343.990320][T12545] team_slave_1: entered promiscuous mode
[  344.041997][T12545] vlan0: entered promiscuous mode
[  344.065497][T12545] team0: entered promiscuous mode
[  344.094202][T12545] vlan0: entered allmulticast mode
[  344.140082][T12545] team0: entered allmulticast mode
[  344.159805][   T27] audit: type=1804 audit(1679448508.735:173): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/412/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0
01:28:28 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

[  344.164346][T12545] team_slave_0: entered allmulticast mode
[  344.307192][   T27] audit: type=1804 audit(1679448508.885:174): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/396/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0
[  344.331853][T12545] team_slave_1: entered allmulticast mode
[  344.333955][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.359615][T12545] team0: left allmulticast mode
[  344.366002][T12545] team_slave_0: left allmulticast mode
[  344.393521][T12545] team_slave_1: left allmulticast mode
[  344.416253][T12545] team0: left promiscuous mode
[  344.446868][T12545] team_slave_0: left promiscuous mode
[  344.452470][T12545] team_slave_1: left promiscuous mode
[  344.469941][   T27] audit: type=1804 audit(1679448509.025:175): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/442/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
[  344.596059][T12548] vlan0: entered allmulticast mode
01:28:29 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

01:28:29 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

01:28:29 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

01:28:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  344.695927][T12551] team_slave_0: entered promiscuous mode
[  344.701755][T12551] team_slave_1: entered promiscuous mode
[  344.727619][T12564] xt_limit: Overflow, try lower: 1241513984/7
[  344.736433][T12565] xt_limit: Overflow, try lower: 1241513984/7
[  344.762305][T12551] vlan0: entered promiscuous mode
[  344.767402][T12551] team0: entered promiscuous mode
[  344.791435][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.802243][T12551] bond1: entered promiscuous mode
[  344.819144][T12551] vlan0: entered allmulticast mode
[  344.847327][T12551] team0: entered allmulticast mode
[  344.858739][T12571] xt_limit: Overflow, try lower: 1241513984/7
[  344.867124][T12551] team_slave_0: entered allmulticast mode
[  344.885359][T12551] team_slave_1: entered allmulticast mode
[  344.904890][T12551] bond1: entered allmulticast mode
[  344.928682][T12551] team0: left allmulticast mode
[  344.935786][T12551] team_slave_0: left allmulticast mode
[  344.941957][T12551] team_slave_1: left allmulticast mode
[  344.949614][T12551] bond1: left allmulticast mode
[  344.958542][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.970909][T12551] team0: left promiscuous mode
[  344.988709][T12551] bond1: left promiscuous mode
[  344.999723][T12551] team_slave_0: left promiscuous mode
[  345.005319][T12551] team_slave_1: left promiscuous mode
[  345.089907][T12564] vlan0: entered allmulticast mode
[  345.124144][T12565] vlan0: entered allmulticast mode
01:28:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  345.152500][T12569] team_slave_0: entered promiscuous mode
[  345.158339][T12569] team_slave_1: entered promiscuous mode
[  345.175684][T12569] vlan0: entered promiscuous mode
[  345.182782][T12569] team0: entered promiscuous mode
[  345.188462][T12569] vlan0: entered allmulticast mode
[  345.193957][T12569] team0: entered allmulticast mode
[  345.199271][T12569] team_slave_0: entered allmulticast mode
[  345.219404][T12569] team_slave_1: entered allmulticast mode
[  345.244002][T12575] xt_limit: Overflow, try lower: 1241513984/7
[  345.288474][T12569] team0: left allmulticast mode
01:28:29 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

[  345.327663][T12569] team_slave_0: left allmulticast mode
[  345.338826][T12569] team_slave_1: left allmulticast mode
[  345.367756][T12569] team0: left promiscuous mode
[  345.375692][T12569] team_slave_0: left promiscuous mode
[  345.381235][T12569] team_slave_1: left promiscuous mode
[  345.459493][T12568] team_slave_0: entered promiscuous mode
[  345.465258][T12568] team_slave_1: entered promiscuous mode
[  345.483830][T12568] vlan0: entered promiscuous mode
[  345.489831][T12568] team0: entered promiscuous mode
[  345.511979][T12568] vlan0: entered allmulticast mode
[  345.543690][T12568] team0: entered allmulticast mode
[  345.564529][T12568] team_slave_0: entered allmulticast mode
[  345.585932][T12568] team_slave_1: entered allmulticast mode
01:28:30 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  345.626488][T12568] team0: left allmulticast mode
[  345.636623][T12568] team_slave_0: left allmulticast mode
[  345.676524][T12568] team_slave_1: left allmulticast mode
[  345.683898][T12568] team0: left promiscuous mode
[  345.691789][T12568] team_slave_0: left promiscuous mode
[  345.697315][T12568] team_slave_1: left promiscuous mode
[  345.723901][T12581] xt_limit: Overflow, try lower: 1241513984/7
[  345.759580][T12571] vlan0: entered allmulticast mode
[  345.809985][T12573] team_slave_0: entered promiscuous mode
[  345.815845][T12573] team_slave_1: entered promiscuous mode
[  345.823415][T12573] vlan0: entered promiscuous mode
[  345.829055][T12573] team0: entered promiscuous mode
[  345.832666][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.835828][T12573] vlan0: entered allmulticast mode
[  345.849908][T12573] team0: entered allmulticast mode
[  345.855855][T12573] team_slave_0: entered allmulticast mode
[  345.861992][T12573] team_slave_1: entered allmulticast mode
[  345.870607][T12573] team0: left allmulticast mode
[  345.877651][T12573] team_slave_0: left allmulticast mode
[  345.888611][T12573] team_slave_1: left allmulticast mode
[  345.894637][T12573] team0: left promiscuous mode
[  345.899955][T12573] team_slave_0: left promiscuous mode
01:28:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

01:28:30 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

01:28:30 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  345.905475][T12573] team_slave_1: left promiscuous mode
[  345.971144][T12587] xt_limit: Overflow, try lower: 1241513984/7
[  345.982495][T12588] xt_limit: Overflow, try lower: 1241513984/7
[  346.031492][T12575] vlan0: entered allmulticast mode
[  346.048934][T12576] team_slave_0: entered promiscuous mode
[  346.054781][T12576] team_slave_1: entered promiscuous mode
[  346.061873][T12576] vlan0: entered promiscuous mode
[  346.068093][T12576] team0: entered promiscuous mode
[  346.087248][T12576] vlan0: entered allmulticast mode
[  346.097387][T12576] team0: entered allmulticast mode
[  346.107486][T12576] team_slave_0: entered allmulticast mode
[  346.116081][T12576] team_slave_1: entered allmulticast mode
[  346.125350][T12576] team0: left allmulticast mode
[  346.138828][T12576] team_slave_0: left allmulticast mode
[  346.149096][T12576] team_slave_1: left allmulticast mode
[  346.155293][T12576] team0: left promiscuous mode
[  346.166887][T12576] team_slave_0: left promiscuous mode
[  346.172464][T12576] team_slave_1: left promiscuous mode
[  346.236553][T12581] vlan0: entered allmulticast mode
01:28:30 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0)
sendfile(r3, r2, 0x0, 0x100004001)

[  346.277212][T12582] team_slave_0: entered promiscuous mode
[  346.282997][T12582] team_slave_1: entered promiscuous mode
[  346.308090][T12582] vlan0: entered promiscuous mode
[  346.328385][T12582] team0: entered promiscuous mode
[  346.339850][T12582] vlan0: entered allmulticast mode
[  346.345389][T12582] team0: entered allmulticast mode
[  346.350884][T12582] team_slave_0: entered allmulticast mode
[  346.356918][T12582] team_slave_1: entered allmulticast mode
[  346.366941][T12582] team0: left allmulticast mode
[  346.372202][T12582] team_slave_0: left allmulticast mode
[  346.378030][T12582] team_slave_1: left allmulticast mode
[  346.383931][T12582] team0: left promiscuous mode
[  346.391450][T12582] team_slave_0: left promiscuous mode
[  346.397015][T12582] team_slave_1: left promiscuous mode
[  346.444852][T12588] vlan0: entered allmulticast mode
[  346.462643][T12587] vlan0: entered allmulticast mode
[  346.494797][T12590] team_slave_0: entered promiscuous mode
[  346.500571][T12590] team_slave_1: entered promiscuous mode
[  346.519500][T12590] vlan0: entered promiscuous mode
01:28:31 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

01:28:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  346.580297][T12590] team0: entered promiscuous mode
[  346.605640][T12590] vlan0: entered allmulticast mode
[  346.651088][T12590] team0: entered allmulticast mode
[  346.656604][T12590] team_slave_0: entered allmulticast mode
[  346.663879][T12590] team_slave_1: entered allmulticast mode
[  346.683707][T12590] team0: left allmulticast mode
[  346.699404][T12590] team_slave_0: left allmulticast mode
[  346.706279][T12590] team_slave_1: left allmulticast mode
[  346.720781][T12590] team0: left promiscuous mode
[  346.726398][T12590] team_slave_0: left promiscuous mode
[  346.732056][T12590] team_slave_1: left promiscuous mode
[  346.783715][T12591] team_slave_0: entered promiscuous mode
[  346.789422][T12591] team_slave_1: entered promiscuous mode
[  346.820371][T12591] vlan0: entered promiscuous mode
01:28:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  346.829570][T12591] team0: entered promiscuous mode
[  346.845273][T12591] bond1: entered promiscuous mode
[  346.852494][T12591] vlan0: entered allmulticast mode
[  346.867592][T12591] team0: entered allmulticast mode
[  346.877849][T12591] team_slave_0: entered allmulticast mode
[  346.898773][T12591] team_slave_1: entered allmulticast mode
[  346.924861][T12591] bond1: entered allmulticast mode
[  346.944987][T12591] team0: left allmulticast mode
[  346.949925][T12591] team_slave_0: left allmulticast mode
[  346.963162][T12591] team_slave_1: left allmulticast mode
[  346.968687][T12591] bond1: left allmulticast mode
01:28:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  346.990181][T12591] team0: left promiscuous mode
[  346.999220][T12591] bond1: left promiscuous mode
[  347.006652][T12591] team_slave_0: left promiscuous mode
[  347.012196][T12591] team_slave_1: left promiscuous mode
[  347.075031][T12598] vlan0: entered allmulticast mode
01:28:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  347.112967][T12600] team_slave_0: entered promiscuous mode
[  347.118713][T12600] team_slave_1: entered promiscuous mode
[  347.126419][T12600] vlan0: entered promiscuous mode
[  347.131580][T12600] team0: entered promiscuous mode
[  347.137016][T12600] vlan0: entered allmulticast mode
[  347.142867][T12600] team0: entered allmulticast mode
[  347.154542][T12600] team_slave_0: entered allmulticast mode
[  347.175282][T12600] team_slave_1: entered allmulticast mode
[  347.213934][T12600] team0: left allmulticast mode
[  347.219827][T12600] team_slave_0: left allmulticast mode
[  347.238269][T12600] team_slave_1: left allmulticast mode
[  347.245213][T12600] team0: left promiscuous mode
[  347.258210][T12600] team_slave_0: left promiscuous mode
[  347.263733][T12600] team_slave_1: left promiscuous mode
01:28:31 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

[  347.320732][T12602] vlan0: entered allmulticast mode
[  347.373801][T12603] team_slave_0: entered promiscuous mode
[  347.379492][T12603] team_slave_1: entered promiscuous mode
[  347.396601][T12603] vlan0: entered promiscuous mode
[  347.404458][T12603] team0: entered promiscuous mode
[  347.417795][T12603] vlan0: entered allmulticast mode
[  347.428088][T12603] team0: entered allmulticast mode
[  347.446449][T12603] team_slave_0: entered allmulticast mode
[  347.455284][T12603] team_slave_1: entered allmulticast mode
[  347.469269][T12603] team0: left allmulticast mode
01:28:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  347.476027][T12603] team_slave_0: left allmulticast mode
[  347.487681][T12603] team_slave_1: left allmulticast mode
[  347.494922][T12603] team0: left promiscuous mode
[  347.500186][T12603] team_slave_0: left promiscuous mode
[  347.505716][T12603] team_slave_1: left promiscuous mode
[  347.603711][T12608] vlan0: entered allmulticast mode
01:28:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

01:28:32 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

[  347.671548][T12609] team_slave_0: entered promiscuous mode
[  347.677367][T12609] team_slave_1: entered promiscuous mode
[  347.700872][T12609] vlan0: entered promiscuous mode
[  347.742823][T12609] team0: entered promiscuous mode
[  347.753907][T12618] limit_mt_check: 4 callbacks suppressed
[  347.753926][T12618] xt_limit: Overflow, try lower: 1241513984/7
[  347.792306][T12609] bond1: entered promiscuous mode
01:28:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  347.825463][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  347.825527][   T27] audit: type=1804 audit(1679448512.405:181): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/448/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
[  347.846486][T12609] vlan0: entered allmulticast mode
[  347.876492][T12609] team0: entered allmulticast mode
[  347.887081][T12609] team_slave_0: entered allmulticast mode
[  347.898648][T12609] team_slave_1: entered allmulticast mode
[  347.910204][T12609] bond1: entered allmulticast mode
[  347.916133][ T5160] net_ratelimit: 5 callbacks suppressed
[  347.916152][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.948545][T12609] team0: left allmulticast mode
[  347.955754][T12609] team_slave_0: left allmulticast mode
[  347.971796][T12609] team_slave_1: left allmulticast mode
[  347.978183][T12609] bond1: left allmulticast mode
[  347.984022][T12609] team0: left promiscuous mode
[  347.996360][T12609] bond1: left promiscuous mode
[  348.018779][T12609] team_slave_0: left promiscuous mode
[  348.024421][T12609] team_slave_1: left promiscuous mode
[  348.035723][   T27] audit: type=1804 audit(1679448512.615:182): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/400/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
[  348.184971][T12611] vlan0: entered allmulticast mode
01:28:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

01:28:32 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x24000, 0x4)

[  348.206215][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.227724][T12612] team_slave_0: entered promiscuous mode
[  348.234148][T12612] team_slave_1: entered promiscuous mode
[  348.271014][T12612] vlan0: entered promiscuous mode
[  348.278965][T12612] team0: entered promiscuous mode
[  348.304194][T12612] vlan0: entered allmulticast mode
[  348.309672][T12612] team0: entered allmulticast mode
01:28:32 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x24000, 0x4)

[  348.324870][T12612] team_slave_0: entered allmulticast mode
[  348.357498][T12612] team_slave_1: entered allmulticast mode
[  348.413811][T12612] team0: left allmulticast mode
[  348.428420][T12612] team_slave_0: left allmulticast mode
01:28:33 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x24000, 0x4)

[  348.442330][   T27] audit: type=1804 audit(1679448513.025:183): pid=12628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/449/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  348.443876][T12612] team_slave_1: left allmulticast mode
[  348.481799][T12612] team0: left promiscuous mode
[  348.487966][T12612] team_slave_0: left promiscuous mode
[  348.493585][T12612] team_slave_1: left promiscuous mode
01:28:33 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x24000, 0x4)

01:28:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

[  348.596914][T12618] vlan0: entered allmulticast mode
01:28:33 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

[  348.662080][T12622] team_slave_0: entered promiscuous mode
[  348.667880][T12622] team_slave_1: entered promiscuous mode
[  348.711017][T12622] vlan0: entered promiscuous mode
[  348.731751][T12622] team0: entered promiscuous mode
[  348.743438][T12622] vlan0: entered allmulticast mode
[  348.762624][T12622] team0: entered allmulticast mode
[  348.775857][T12622] team_slave_0: entered allmulticast mode
[  348.803730][T12622] team_slave_1: entered allmulticast mode
[  348.826872][T12622] team0: left allmulticast mode
[  348.838277][T12622] team_slave_0: left allmulticast mode
[  348.854075][T12622] team_slave_1: left allmulticast mode
[  348.859653][   T27] audit: type=1804 audit(1679448513.435:184): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/401/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0
[  348.887219][T12622] team0: left promiscuous mode
[  348.893454][T12622] team_slave_0: left promiscuous mode
[  348.898938][T12622] team_slave_1: left promiscuous mode
01:28:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000042c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x38260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x51)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r17 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r18=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r18}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0)

01:28:33 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)

01:28:33 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

[  348.951028][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

01:28:33 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

01:28:33 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x1000000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)={&(0x7f0000001400)='./file0\x00'}, 0x10)

01:28:33 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

[  349.039970][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.055766][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:33 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

[  349.104518][T12649] xt_limit: Overflow, try lower: 1241513984/7
[  349.159026][T12649] vlan0: entered allmulticast mode
01:28:33 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

01:28:33 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12)

[  349.268346][T12655] team_slave_0: entered promiscuous mode
[  349.274145][T12655] team_slave_1: entered promiscuous mode
[  349.280496][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000ce", @ANYRES32=r6], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100004001)

01:28:33 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

[  349.341038][T12655] vlan0: entered promiscuous mode
[  349.354606][T12655] team0: entered promiscuous mode
[  349.396839][T12655] vlan0: entered allmulticast mode
[  349.407848][T12655] team0: entered allmulticast mode
[  349.413264][T12655] team_slave_0: entered allmulticast mode
[  349.419403][T12655] team_slave_1: entered allmulticast mode
[  349.453447][T12655] team0: left allmulticast mode
[  349.520691][T12655] team_slave_0: left allmulticast mode
[  349.575841][T12655] team_slave_1: left allmulticast mode
[  349.596966][T12655] team0: left promiscuous mode
[  349.631444][T12655] team_slave_0: left promiscuous mode
[  349.636992][T12655] team_slave_1: left promiscuous mode
[  349.662137][   T27] audit: type=1804 audit(1679448514.245:185): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/402/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
01:28:34 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:34 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x1000000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)={&(0x7f0000001400)='./file0\x00'}, 0x10)

01:28:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

01:28:34 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:34 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:34 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

[  349.990941][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:34 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d02000000880b5f04596a5e99fce658be2e200c699223887c8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683626e00dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856e31ed9474ff24cf609068f645ce971fc0480737a55ebb0bd701f7fb21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933b06759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1aab71b3369ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc4223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100000000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409de14d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d25fd8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335587b54c13c3130978fa069af8223b38ced735c2d906551ca85ffa4add5647489b39601270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958fd235d6071619a6554b82d9c162f3556076b80550eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae027fd15bc74de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faeb44158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000000000d503d79906958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e01f7d7dc22174ea42c7a6f608ad53a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164e3f2491e4793e590dcc71de10da96366c40dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17556abb722d9c085b189b5fd1f30e8dc813f608830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe555318014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646aef651cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489eb66fd5db1c053d9c2c7861552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde000000000000000000000004000000000000000000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738eecc04d27b766cf7f60066edd292f6c8a2174f391ed16439c81717e85978e38e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210be5d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c66a2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd9de6d4c4c7510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d2efd046dc64b35f9c3397ce6f4ad357b000000000000000000"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

01:28:34 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

01:28:34 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

[  350.311052][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:35 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x1000000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)={&(0x7f0000001400)='./file0\x00'}, 0x10)

01:28:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d02000000880b5f04596a5e99fce658be2e200c699223887c8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683626e00dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856e31ed9474ff24cf609068f645ce971fc0480737a55ebb0bd701f7fb21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933b06759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1aab71b3369ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc4223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100000000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409de14d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d25fd8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335587b54c13c3130978fa069af8223b38ced735c2d906551ca85ffa4add5647489b39601270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958fd235d6071619a6554b82d9c162f3556076b80550eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae027fd15bc74de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faeb44158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000000000d503d79906958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e01f7d7dc22174ea42c7a6f608ad53a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164e3f2491e4793e590dcc71de10da96366c40dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17556abb722d9c085b189b5fd1f30e8dc813f608830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe555318014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646aef651cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489eb66fd5db1c053d9c2c7861552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde000000000000000000000004000000000000000000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738eecc04d27b766cf7f60066edd292f6c8a2174f391ed16439c81717e85978e38e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210be5d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c66a2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd9de6d4c4c7510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d2efd046dc64b35f9c3397ce6f4ad357b000000000000000000"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:35 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d02000000880b5f04596a5e99fce658be2e200c699223887c8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683626e00dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856e31ed9474ff24cf609068f645ce971fc0480737a55ebb0bd701f7fb21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933b06759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1aab71b3369ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc4223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100000000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409de14d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d25fd8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335587b54c13c3130978fa069af8223b38ced735c2d906551ca85ffa4add5647489b39601270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958fd235d6071619a6554b82d9c162f3556076b80550eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae027fd15bc74de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faeb44158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000000000d503d79906958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e01f7d7dc22174ea42c7a6f608ad53a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164e3f2491e4793e590dcc71de10da96366c40dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17556abb722d9c085b189b5fd1f30e8dc813f608830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe555318014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646aef651cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489eb66fd5db1c053d9c2c7861552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde000000000000000000000004000000000000000000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738eecc04d27b766cf7f60066edd292f6c8a2174f391ed16439c81717e85978e38e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210be5d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c66a2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd9de6d4c4c7510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d2efd046dc64b35f9c3397ce6f4ad357b000000000000000000"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:28:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  351.030982][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
shutdown(r0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x700}], 0x1, 0x440b5)

01:28:35 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

[  351.351247][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:36 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x1000000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)={&(0x7f0000001400)='./file0\x00'}, 0x10)

01:28:36 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:28:36 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:36 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, 0x1c}}, 0x44040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7fffffff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r1, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)

01:28:36 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:28:36 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

01:28:36 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0)

01:28:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)="e5", 0x1}, {&(0x7f0000000740)='\\', 0x1}], 0x2}, 0x8000)

01:28:36 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, 0x0, 0x0)

01:28:36 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

01:28:36 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:36 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

01:28:36 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

01:28:36 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0)

01:28:36 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, 0x0, 0x0)

01:28:37 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

01:28:37 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

01:28:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0)

[  352.402464][T12786] validate_nla: 9 callbacks suppressed
[  352.402485][T12786] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
01:28:37 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, 0x0, 0x0)

01:28:37 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

01:28:37 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

01:28:37 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

[  352.606566][T12799] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
01:28:37 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, 0x0, 0x0)

01:28:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0)

01:28:37 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

01:28:37 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

01:28:37 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:37 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

[  353.113470][ T6248] net_ratelimit: 4 callbacks suppressed
[  353.113492][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:37 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:37 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:37 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

[  353.217131][T12810] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  353.226645][T12807] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
01:28:37 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

01:28:37 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

[  353.334396][T12822] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  353.377067][T12825] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
01:28:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

01:28:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

[  353.432564][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.454533][T12831] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
01:28:38 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

01:28:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

[  353.617007][T12835] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
01:28:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0)

[  353.666854][T12837] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[  353.807127][T12841] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
01:28:38 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x20e, 0x4)

01:28:38 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:38 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

01:28:38 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000009c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="90", 0x1}], 0x1, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0x3f00}}], 0x18}], 0x1, 0x0)

01:28:38 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:38 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

[  354.158793][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:38 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

01:28:39 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x300)

[  354.344934][   T27] audit: type=1804 audit(1679448518.925:186): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir92146310/syzkaller.ug245m/445/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
[  354.477306][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  354.704223][   T27] audit: type=1804 audit(1679448519.285:187): pid=12870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/424/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
01:28:39 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:39 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

01:28:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  355.035553][   T27] audit: type=1804 audit(1679448519.615:188): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir92146310/syzkaller.ug245m/446/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
01:28:39 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000009c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="90", 0x1}], 0x1, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0x3f00}}], 0x18}], 0x1, 0x0)

[  355.124337][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.140945][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:39 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

[  355.198569][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:39 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000540)=""/222, 0xde}], 0x2, &(0x7f0000000640)=""/130, 0x82}}], 0x1, 0x10022, 0x0)
clock_gettime(0x0, 0x0)

[  355.341620][   T27] audit: type=1804 audit(1679448519.925:189): pid=12885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/425/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
[  355.511214][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  356.014825][   T27] audit: type=1804 audit(1679448520.595:190): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir92146310/syzkaller.ug245m/447/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
[  356.086264][   T27] audit: type=1804 audit(1679448520.665:191): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/426/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
01:28:40 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000009c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="90", 0x1}], 0x1, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0x3f00}}], 0x18}], 0x1, 0x0)

[  356.181935][   T27] audit: type=1804 audit(1679448520.755:192): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/459/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0
[  356.234236][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  356.505721][   T27] audit: type=1804 audit(1679448521.085:193): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/432/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
[  356.553446][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.615525][   T27] audit: type=1804 audit(1679448521.185:194): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/459/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0
01:28:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:41 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  357.096365][T12907] warn_alloc: 4 callbacks suppressed
[  357.096385][T12907] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  357.179110][T12907] CPU: 0 PID: 12907 Comm: syz-executor.3 Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  357.189614][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  357.199805][T12907] Call Trace:
[  357.203128][T12907]  <TASK>
[  357.206138][T12907]  dump_stack_lvl+0x136/0x150
[  357.210877][T12907]  warn_alloc+0x213/0x360
[  357.215271][T12907]  ? zone_watermark_ok_safe+0x2e0/0x2e0
[  357.220902][T12907]  __vmalloc_node_range+0xf1c/0x1300
[  357.226271][T12907]  ? netlink_sendmsg+0x69e/0xe30
[  357.231289][T12907]  ? delayed_vfree_work+0x70/0x70
[  357.236405][T12907]  ? netlink_sendmsg+0x69e/0xe30
[  357.241412][T12907]  vmalloc+0x6b/0x80
[  357.245382][T12907]  ? netlink_sendmsg+0x69e/0xe30
[  357.250507][T12907]  netlink_sendmsg+0x69e/0xe30
[  357.255348][T12907]  ? netlink_unicast+0x7f0/0x7f0
[  357.260363][T12907]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  357.266406][T12907]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  357.271755][T12907]  ? netlink_unicast+0x7f0/0x7f0
[  357.276766][T12907]  sock_sendmsg+0xde/0x190
[  357.281253][T12907]  sock_no_sendpage+0x10c/0x160
[  357.286157][T12907]  ? sk_page_frag_refill+0x300/0x300
[  357.291488][T12907]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  357.297535][T12907]  ? lock_downgrade+0x690/0x690
[  357.302461][T12907]  ? find_held_lock+0x2d/0x110
[  357.307275][T12907]  kernel_sendpage.part.0+0x1d5/0x700
[  357.312729][T12907]  sock_sendpage+0xe7/0x180
[  357.317284][T12907]  ? kernel_sendpage+0xd0/0xd0
[  357.322085][T12907]  pipe_to_sendpage+0x2b1/0x380
[  357.326980][T12907]  ? propagate_umount+0x19f0/0x19f0
[  357.332231][T12907]  __splice_from_pipe+0x449/0x8a0
[  357.337335][T12907]  ? propagate_umount+0x19f0/0x19f0
[  357.342600][T12907]  generic_splice_sendpage+0xd8/0x140
[  357.348032][T12907]  ? __do_sys_vmsplice+0xaa0/0xaa0
[  357.353198][T12907]  ? security_file_permission+0xaf/0xd0
[  357.358778][T12907]  ? __do_sys_vmsplice+0xaa0/0xaa0
[  357.363937][T12907]  direct_splice_actor+0x114/0x180
[  357.369126][T12907]  splice_direct_to_actor+0x335/0x8a0
[  357.374537][T12907]  ? folio_flags.constprop.0+0x150/0x150
[  357.380215][T12907]  ? direct_splice_actor+0x180/0x180
[  357.385539][T12907]  ? bpf_lsm_file_permission+0x9/0x10
[  357.390953][T12907]  ? security_file_permission+0xaf/0xd0
[  357.396534][T12907]  do_splice_direct+0x1ab/0x280
[  357.401424][T12907]  ? splice_direct_to_actor+0x8a0/0x8a0
[  357.407009][T12907]  ? bpf_lsm_file_permission+0x9/0x10
[  357.412424][T12907]  ? security_file_permission+0xaf/0xd0
[  357.418004][T12907]  do_sendfile+0xb19/0x12c0
[  357.422560][T12907]  ? vfs_iocb_iter_write+0x480/0x480
[  357.427893][T12907]  ? xfd_validate_state+0x5d/0x180
[  357.433035][T12907]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  357.438985][T12907]  __x64_sys_sendfile64+0x1d0/0x210
[  357.444211][T12907]  ? __ia32_sys_sendfile+0x220/0x220
[  357.449529][T12907]  ? syscall_enter_from_user_mode+0x26/0xb0
[  357.455461][T12907]  do_syscall_64+0x39/0xb0
[  357.459903][T12907]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  357.465831][T12907] RIP: 0033:0x7f006fa8c0f9
[  357.470266][T12907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  357.489899][T12907] RSP: 002b:00007f007070e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  357.498355][T12907] RAX: ffffffffffffffda RBX: 00007f006fbac120 RCX: 00007f006fa8c0f9
[  357.506345][T12907] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007
[  357.514337][T12907] RBP: 00007f006fae7b39 R08: 0000000000000000 R09: 0000000000000000
[  357.522332][T12907] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000000
01:28:42 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000009c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="90", 0x1}], 0x1, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0x3f00}}], 0x18}], 0x1, 0x0)

[  357.530318][T12907] R13: 00007ffd608eb67f R14: 00007f007070e300 R15: 0000000000022000
[  357.538347][T12907]  </TASK>
[  357.544129][   T27] audit: type=1804 audit(1679448521.845:195): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/427/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
[  357.603659][T12907] Mem-Info:
[  357.612713][T12907] active_anon:26470 inactive_anon:511 isolated_anon:0
[  357.612713][T12907]  active_file:0 inactive_file:16162 isolated_file:0
[  357.612713][T12907]  unevictable:768 dirty:253 writeback:0
[  357.612713][T12907]  slab_reclaimable:20853 slab_unreclaimable:107971
[  357.612713][T12907]  mapped:20436 shmem:2084 pagetables:573
[  357.612713][T12907]  sec_pagetables:0 bounce:0
[  357.612713][T12907]  kernel_misc_reclaimable:0
[  357.612713][T12907]  free:1391800 free_pcp:7594 free_cma:0
[  357.708532][T12907] Node 0 active_anon:105916kB inactive_anon:2044kB active_file:0kB inactive_file:64596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:81788kB dirty:1028kB writeback:0kB shmem:6800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no
01:28:42 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  357.833115][T12907] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  357.916909][T12907] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
01:28:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  358.098020][T12907] lowmem_reserve[]: 0 2617 2619 2619 2619
[  358.127352][T12926] net_ratelimit: 9 callbacks suppressed
[  358.127375][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.138990][T12907] Node 0 
[  358.153645][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.153647][T12907] DMA32 free:1622860kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:105976kB inactive_anon:2040kB active_file:0kB inactive_file:63160kB unevictable:1536kB writepending:728kB present:3129332kB managed:2685112kB mlocked:0kB bounce:0kB free_pcp:13672kB local_pcp:10532kB free_cma:0kB
[  358.156917][T11969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  358.209104][T12907] lowmem_reserve[]: 0 0 1 1 1
[  358.287370][T12907] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1536kB unevictable:0kB writepending:0kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  358.391174][T12907] lowmem_reserve[]: 0 0 0 0 0
[  358.396555][T12907] Node 1 Normal free:3927980kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:11840kB free_cma:0kB
[  358.409398][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  358.520814][T12907] lowmem_reserve[]: 0 0 0 0 0
[  358.547447][T12907] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  358.631267][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.662008][T12907] Node 0 DMA32: 548*4kB (UM) 406*8kB (UME) 389*16kB (UME) 784*32kB (UME) 301*64kB (UME) 139*128kB (UME) 42*256kB (UME) 18*512kB (UME) 3*1024kB (UME) 5*2048kB (UME) 370*4096kB (UM) = 1622608kB
[  358.685832][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.711532][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.790522][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.796580][T12907] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  358.821961][T12938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.864024][T12907] Node 1 Normal: 167*4kB (U) 46*8kB (UME) 26*16kB (UE) 124*32kB (UME) 30*64kB (UME) 8*128kB (UE) 1*256kB (U) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 955*4096kB (M) = 3927980kB
[  358.873239][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.890300][T12907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  358.934968][T12907] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  358.985151][T12907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  359.027106][T12907] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  359.091624][T12907] 18059 total pagecache pages
[  359.111010][T12907] 0 pages in swap cache
[  359.115246][T12907] Free swap  = 0kB
[  359.118994][T12907] Total swap = 0kB
[  359.147027][T12907] 2097051 pages RAM
[  359.160450][T12907] 0 pages HighMem/MovableOnly
[  359.176452][T12907] 392127 pages reserved
[  359.194305][T12907] 0 pages cma reserved
01:28:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  359.365088][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  359.365107][   T27] audit: type=1804 audit(1679448523.945:202): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/434/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0
01:28:44 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  359.493890][   T27] audit: type=1804 audit(1679448524.035:203): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/429/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0
[  359.608856][   T27] audit: type=1804 audit(1679448524.185:204): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/460/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0
[  359.749468][   T27] audit: type=1804 audit(1679448524.295:205): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir92146310/syzkaller.ug245m/450/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0
01:28:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:44 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  360.282444][   T27] audit: type=1804 audit(1679448524.865:206): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/445/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
[  360.389060][   T27] audit: type=1804 audit(1679448524.945:207): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/435/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0
[  360.499710][   T27] audit: type=1804 audit(1679448524.965:208): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/461/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
01:28:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000002280)=""/4087, &(0x7f0000000040)=0xff7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  360.625287][   T27] audit: type=1804 audit(1679448525.075:209): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/430/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0
01:28:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

[  360.938320][   T27] audit: type=1804 audit(1679448525.515:210): pid=12980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/461/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0
[  361.019035][   T27] audit: type=1804 audit(1679448525.575:211): pid=12983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir92146310/syzkaller.ug245m/451/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0
01:28:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:46 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x15, 0x1, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)

01:28:46 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:46 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x15, 0x1, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)

01:28:46 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x15, 0x1, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)

01:28:46 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x15, 0x1, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0)

01:28:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000006140000000800030000000008180001801400020073797a5f74756e"], 0x34}}, 0x0)

01:28:47 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:47 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:47 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:47 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:47 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

01:28:47 executing program 4:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:47 executing program 3:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000006140000000800030000000008180001801400020073797a5f74756e"], 0x34}}, 0x0)

01:28:47 executing program 3:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:47 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

01:28:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6, &(0x7f0000000100)=""/4066, &(0x7f0000000000)=0xfe2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

01:28:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000006140000000800030000000008180001801400020073797a5f74756e"], 0x34}}, 0x0)

01:28:47 executing program 0:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:47 executing program 3:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000006140000000800030000000008180001801400020073797a5f74756e"], 0x34}}, 0x0)

01:28:47 executing program 0:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:48 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

[  363.831419][ T5160] net_ratelimit: 60 callbacks suppressed
[  363.831439][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:48 executing program 4:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:48 executing program 3:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:48 executing program 0:
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x2}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0)="ee", &(0x7f0000000400)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r1}, 0x20)

01:28:48 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x20000000)

[  363.910945][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:48 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x20000000)

01:28:48 executing program 5:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:48 executing program 3:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:48 executing program 0:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:48 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x20000000)

01:28:48 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x20000000)

[  364.237000][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.245754][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:48 executing program 2:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:49 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

[  364.885394][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.951059][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:50 executing program 4:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:50 executing program 5:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:50 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

01:28:50 executing program 3:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:50 executing program 0:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

[  365.912770][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.991402][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:50 executing program 2:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:51 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

[  366.951288][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.031009][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:51 executing program 5:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:52 executing program 4:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:52 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

01:28:52 executing program 3:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:52 executing program 2:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:52 executing program 0:
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
sendfile(r1, r0, 0x0, 0x8000000000004)
accept(r1, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff000000009500000000000000d4c0afb29ab5212a0020b88373007d6219b126eada11be03a04e62f6e15d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{}, r7, 0x0, @unused=[0x0, 0x10001, 0x0, 0x8], @devid})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000fffffff2f5bcb1cd2356ffffffffff080000000000000000000000000000000500000000000000070000000000000070870000000000006425403eb8ed5a57d46b1b6e16a7cc4dd09adf5a05c6fac58eb2fecc33087efac84922790c3de8bca35127b1594c40bb140d7500522d253dd33f98c8d44f254ecd447e5f8368b6cc68"]}, @subvolid=0x1f})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x84)

01:28:53 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

[  369.031923][ T5160] net_ratelimit: 4 callbacks suppressed
[  369.031952][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.111463][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:53 executing program 4:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

01:28:53 executing program 5:
socket$inet6_sctp(0xa, 0x1, 0x84)
select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, 0x0)

01:28:53 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 3:
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9016a4e7ff00002200000efe08060001080006040000ae6a6340fbe2e2"], 0x120)

01:28:54 executing program 3:
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9016a4e7ff00002200000efe08060001080006040000ae6a6340fbe2e2"], 0x120)

01:28:54 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 3:
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9016a4e7ff00002200000efe08060001080006040000ae6a6340fbe2e2"], 0x120)

01:28:54 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}}, 0x0)

01:28:54 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 3:
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9016a4e7ff00002200000efe08060001080006040000ae6a6340fbe2e2"], 0x120)

[  370.071276][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:54 executing program 4:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

[  370.151236][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:54 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 5:
socket$inet6_sctp(0xa, 0x1, 0x84)
select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, 0x0)

01:28:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}}, 0x0)

01:28:54 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x57f498e3c5870cd7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

01:28:54 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:28:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}}, 0x0)

01:28:54 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

[  370.311812][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.320211][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}}, 0x0)

01:28:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}]}, 0x48}}, 0x0)

01:28:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:28:55 executing program 4:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, 0x0, 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x73, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='*', 0x1}], 0x1, 0x0)
write(r2, 0x0, 0x0)

01:28:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}]}, 0x48}}, 0x0)

01:28:55 executing program 5:
socket$inet6_sctp(0xa, 0x1, 0x84)
select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, 0x0)

01:28:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:28:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}]}, 0x48}}, 0x0)

[  371.111080][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.192680][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:56 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:28:56 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

01:28:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}}]}, 0x48}}, 0x0)

01:28:56 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:56 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

[  371.830825][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:56 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:56 executing program 5:
socket$inet6_sctp(0xa, 0x1, 0x84)
select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, 0x0)

[  372.151393][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:57 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

[  372.471867][ T5117] Bluetooth: hci5: command 0x0405 tx timeout
01:28:57 executing program 5:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:57 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

01:28:58 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:58 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:58 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

[  374.231467][ T6248] net_ratelimit: 6 callbacks suppressed
[  374.231489][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.311003][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:28:59 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:59 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:28:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

[  375.271217][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.350956][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:00 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000240), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

01:29:00 executing program 5:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

[  376.321584][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.391763][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.401034][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.409388][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:01 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:29:01 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:29:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

[  377.398280][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.433012][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:02 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:29:02 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:29:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:03 executing program 5:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x401}, &(0x7f0000000380)=0x40)
socket$inet6(0xa, 0x0, 0x7f)

01:29:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

[  379.431902][T11956] net_ratelimit: 2 callbacks suppressed
[  379.431920][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.446222][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.511073][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.519350][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:04 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:04 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

[  380.551599][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.559901][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:05 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:05 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:05 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

[  381.591061][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.599364][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:06 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

01:29:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:06 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

01:29:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:06 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

01:29:06 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

01:29:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:06 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

01:29:06 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

01:29:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x4040400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'})
openat$cgroup_ro(r5, &(0x7f0000000800)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800, 0xc}, 0x20)
bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x6, r4, 0x31, r5}, 0x10)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x4004)
recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe24}, {0x0, 0x46c}, {&(0x7f0000002a80)=""/4090, 0x2c}], 0x3}}], 0x2f3, 0x10000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x34, 0x68, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x3c}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000260004"], 0x40}}, 0x0)

01:29:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:06 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in, 0x2}]}, 0x38}}, 0x0)

[  382.353899][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  382.353918][   T27] audit: type=1804 audit(1679448546.935:218): pid=13481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/489/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
01:29:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:07 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

[  382.471076][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.479366][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.506147][   T27] audit: type=1804 audit(1679448546.935:219): pid=13481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/489/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
[  382.734034][   T27] audit: type=1804 audit(1679448547.315:220): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/487/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
[  382.847593][   T27] audit: type=1804 audit(1679448547.395:221): pid=13488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/446/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0
[  382.937997][   T27] audit: type=1804 audit(1679448547.415:222): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/487/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
[  382.986866][   T27] audit: type=1804 audit(1679448547.465:223): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/446/cgroup.controllers" dev="sda1" ino=1151 res=1 errno=0
[  383.032346][   T27] audit: type=1804 audit(1679448547.505:224): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/490/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
[  383.122908][   T27] audit: type=1804 audit(1679448547.555:225): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/477/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0
[  383.179302][   T27] audit: type=1804 audit(1679448547.605:226): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/490/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
[  383.274404][   T27] audit: type=1804 audit(1679448547.645:227): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/477/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0
[  383.352370][ T1214] ieee802154 phy0 wpan0: encryption failed: -22
[  383.358779][ T1214] ieee802154 phy1 wpan1: encryption failed: -22
[  383.471316][T13488] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  383.509341][T13488] CPU: 1 PID: 13488 Comm: syz-executor.5 Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  383.519915][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  383.530022][T13488] Call Trace:
[  383.533330][T13488]  <TASK>
[  383.536292][T13488]  dump_stack_lvl+0x136/0x150
[  383.541022][T13488]  warn_alloc+0x213/0x360
[  383.545390][T13488]  ? zone_watermark_ok_safe+0x2e0/0x2e0
[  383.551005][T13488]  __vmalloc_node_range+0xf1c/0x1300
[  383.556354][T13488]  ? netlink_sendmsg+0x69e/0xe30
[  383.561351][T13488]  ? delayed_vfree_work+0x70/0x70
[  383.566452][T13488]  ? netlink_sendmsg+0x69e/0xe30
[  383.571446][T13488]  vmalloc+0x6b/0x80
[  383.575394][T13488]  ? netlink_sendmsg+0x69e/0xe30
[  383.580376][T13488]  netlink_sendmsg+0x69e/0xe30
[  383.585189][T13488]  ? netlink_unicast+0x7f0/0x7f0
[  383.590168][T13488]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  383.596196][T13488]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  383.601507][T13488]  ? netlink_unicast+0x7f0/0x7f0
[  383.606466][T13488]  sock_sendmsg+0xde/0x190
[  383.610922][T13488]  sock_no_sendpage+0x10c/0x160
[  383.615802][T13488]  ? sk_page_frag_refill+0x300/0x300
[  383.621103][T13488]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  383.627099][T13488]  ? lock_downgrade+0x690/0x690
[  383.631977][T13488]  ? find_held_lock+0x2d/0x110
[  383.636808][T13488]  kernel_sendpage.part.0+0x1d5/0x700
[  383.642224][T13488]  sock_sendpage+0xe7/0x180
[  383.646778][T13488]  ? kernel_sendpage+0xd0/0xd0
[  383.651586][T13488]  pipe_to_sendpage+0x2b1/0x380
[  383.656479][T13488]  ? propagate_umount+0x19f0/0x19f0
[  383.661757][T13488]  __splice_from_pipe+0x449/0x8a0
[  383.666842][T13488]  ? propagate_umount+0x19f0/0x19f0
[  383.672096][T13488]  generic_splice_sendpage+0xd8/0x140
[  383.677506][T13488]  ? __do_sys_vmsplice+0xaa0/0xaa0
[  383.682655][T13488]  ? security_file_permission+0xaf/0xd0
[  383.688225][T13488]  ? __do_sys_vmsplice+0xaa0/0xaa0
[  383.693378][T13488]  direct_splice_actor+0x114/0x180
[  383.698528][T13488]  splice_direct_to_actor+0x335/0x8a0
[  383.703943][T13488]  ? folio_flags.constprop.0+0x150/0x150
[  383.709632][T13488]  ? direct_splice_actor+0x180/0x180
[  383.714954][T13488]  ? bpf_lsm_file_permission+0x9/0x10
[  383.720379][T13488]  ? security_file_permission+0xaf/0xd0
[  383.725960][T13488]  do_splice_direct+0x1ab/0x280
[  383.730870][T13488]  ? splice_direct_to_actor+0x8a0/0x8a0
[  383.736465][T13488]  ? bpf_lsm_file_permission+0x9/0x10
[  383.741888][T13488]  ? security_file_permission+0xaf/0xd0
[  383.747475][T13488]  do_sendfile+0xb19/0x12c0
[  383.752036][T13488]  ? vfs_iocb_iter_write+0x480/0x480
[  383.757376][T13488]  ? xfd_validate_state+0x5d/0x180
[  383.762537][T13488]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  383.768479][T13488]  __x64_sys_sendfile64+0x1d0/0x210
[  383.773711][T13488]  ? __ia32_sys_sendfile+0x220/0x220
[  383.779036][T13488]  ? syscall_enter_from_user_mode+0x26/0xb0
[  383.784986][T13488]  do_syscall_64+0x39/0xb0
[  383.789449][T13488]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  383.795379][T13488] RIP: 0033:0x7f27a008c0f9
[  383.799821][T13488] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  383.819445][T13488] RSP: 002b:00007f27a0d47168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  383.827878][T13488] RAX: ffffffffffffffda RBX: 00007f27a01abf80 RCX: 00007f27a008c0f9
[  383.835866][T13488] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009
[  383.843846][T13488] RBP: 00007f27a00e7b39 R08: 0000000000000000 R09: 0000000000000000
[  383.851847][T13488] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000000
[  383.859928][T13488] R13: 00007ffd298059af R14: 00007f27a0d47300 R15: 0000000000022000
[  383.867953][T13488]  </TASK>
[  383.927713][T13488] Mem-Info:
[  383.931172][T13488] active_anon:20820 inactive_anon:517 isolated_anon:0
[  383.931172][T13488]  active_file:0 inactive_file:16047 isolated_file:0
[  383.931172][T13488]  unevictable:768 dirty:325 writeback:0
[  383.931172][T13488]  slab_reclaimable:20844 slab_unreclaimable:111169
[  383.931172][T13488]  mapped:17937 shmem:2090 pagetables:530
[  383.931172][T13488]  sec_pagetables:0 bounce:0
[  383.931172][T13488]  kernel_misc_reclaimable:0
[  383.931172][T13488]  free:1394216 free_pcp:14480 free_cma:0
[  384.006139][T13488] Node 0 active_anon:83280kB inactive_anon:2068kB active_file:0kB inactive_file:62812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:71748kB dirty:500kB writeback:0kB shmem:6824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11712kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no
[  384.047345][T13488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  384.091662][T13488] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  384.128457][T13488] lowmem_reserve[]: 0 2617 2619 2619 2619
[  384.135138][T13488] Node 0 DMA32 free:1657872kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:83240kB inactive_anon:2064kB active_file:0kB inactive_file:61276kB unevictable:1536kB writepending:500kB present:3129332kB managed:2685112kB mlocked:0kB bounce:0kB free_pcp:20548kB local_pcp:19788kB free_cma:0kB
[  384.179018][T13488] lowmem_reserve[]: 0 0 1 1 1
[  384.187700][T13488] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1536kB unevictable:0kB writepending:0kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  384.224427][T13488] lowmem_reserve[]: 0 0 0 0 0
[  384.229300][T13488] Node 1 Normal free:3927980kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:17408kB local_pcp:11840kB free_cma:0kB
[  384.267737][T13488] lowmem_reserve[]: 0 0 0 0 0
[  384.272836][T13488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  384.295838][T13488] Node 0 DMA32: 3358*4kB (UME) 997*8kB (UME) 411*16kB (UME) 1144*32kB (UME) 370*64kB (UME) 251*128kB (UME) 76*256kB (UME) 23*512kB (UME) 7*1024kB (UME) 2*2048kB (UE) 365*4096kB (UM) = 1657936kB
[  384.322847][T13488] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  384.344017][T13488] Node 1 Normal: 167*4kB (U) 46*8kB (UME) 26*16kB (UE) 124*32kB (UME) 30*64kB (UME) 8*128kB (UE) 1*256kB (U) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 955*4096kB (M) = 3927980kB
[  384.369687][T13488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  384.384019][T13488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  384.405069][T13488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  384.423620][T13488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  384.437109][T13488] 17700 total pagecache pages
[  384.445716][T13488] 0 pages in swap cache
[  384.449943][T13488] Free swap  = 0kB
[  384.458606][T13488] Total swap = 0kB
[  384.464540][T13488] 2097051 pages RAM
[  384.468442][T13488] 0 pages HighMem/MovableOnly
[  384.473519][T13488] 392127 pages reserved
[  384.477702][T13488] 0 pages cma reserved
[  384.768445][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  384.776502][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.784895][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.797716][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.811217][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  384.818531][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.961218][ T5161] net_ratelimit: 4 callbacks suppressed
[  384.961245][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.975624][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.030170][T13502] chnl_net:caif_netlink_parms(): no params data found
[  385.106675][T13502] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.114174][T13502] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.122400][T13502] bridge_slave_0: entered allmulticast mode
[  385.129220][T13502] bridge_slave_0: entered promiscuous mode
[  385.160895][T13502] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.168039][T13502] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.175782][T13502] bridge_slave_1: entered allmulticast mode
[  385.183054][T13502] bridge_slave_1: entered promiscuous mode
[  385.234781][T13502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.246083][T13502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.276675][T13502] team0: Port device team_slave_0 added
[  385.285642][T13502] team0: Port device team_slave_1 added
[  385.326530][T13502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.333685][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.360024][T13502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.385625][T13502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.392960][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.419516][T13502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.466535][T13502] hsr_slave_0: entered promiscuous mode
[  385.472971][T13502] hsr_slave_1: entered promiscuous mode
[  385.479045][T13502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  385.486884][T13502] Cannot create hsr debugfs directory
[  385.521456][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.529797][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.718969][T13502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.885160][T13502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.002676][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.011419][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.012040][T13502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.155922][T13502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.871025][ T5117] Bluetooth: hci4: command 0x0409 tx timeout
[  386.925536][T13502] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  386.938476][T13502] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  386.947775][T13502] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  386.958551][T13502] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  387.031426][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.040119][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.053277][T13502] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.069984][T13502] 8021q: adding VLAN 0 to HW filter on device team0
[  387.077142][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  387.085829][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  387.108505][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  387.117910][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  387.126816][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.133960][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.142253][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  387.151110][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  387.160168][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.167378][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.175204][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  387.194779][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  387.202881][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  387.212388][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  387.221953][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  387.230459][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  387.239426][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  387.253808][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  387.261834][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  387.270180][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  387.284153][T13502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.295556][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  387.304030][T11956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  387.312724][T11956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  387.504515][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  387.512501][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  387.525521][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.810051][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  387.819215][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  387.839116][T13502] veth0_vlan: entered promiscuous mode
[  387.845621][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  387.854146][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  387.863705][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  387.872045][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  387.888783][T13502] veth1_vlan: entered promiscuous mode
[  387.914631][T13502] veth0_macvtap: entered promiscuous mode
[  387.921443][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  387.929919][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  387.939243][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  387.948027][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  387.956998][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  387.968194][T13502] veth1_macvtap: entered promiscuous mode
[  387.986121][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.997071][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.008357][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.024357][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.034337][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.044952][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.054914][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.066358][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.076657][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.077344][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.095506][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.104259][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.114378][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.130683][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.142550][T13502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.153960][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  388.162320][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  388.171936][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  388.188187][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.198781][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.208997][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.219618][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.229676][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.240573][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.251512][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.262197][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.273591][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.284557][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.294561][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.305106][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.316919][T13502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.325051][T11956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  388.333969][T11956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  388.346868][T13502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.359144][T13502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.372084][T13502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.380902][T13502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.444227][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.453321][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.485180][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  388.507555][ T5199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.517363][ T5199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.528861][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:29:13 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in, 0x2}]}, 0x38}}, 0x0)

01:29:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:13 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5450, 0x0)

01:29:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in, 0x2}]}, 0x38}}, 0x0)

01:29:13 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x9, 0x4, 0xb45, 0x800, 0xc}, 0x48)

01:29:13 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in, 0x2}]}, 0x38}}, 0x0)

01:29:13 executing program 1:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

[  388.908387][   T27] audit: type=1804 audit(1679448553.485:228): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/488/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  388.960765][ T5114] Bluetooth: hci4: command 0x041b tx timeout
01:29:13 executing program 1:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

[  389.040412][   T27] audit: type=1804 audit(1679448553.485:229): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/491/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
01:29:13 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x9, 0x4, 0xb45, 0x800, 0xc}, 0x48)

[  389.104632][   T27] audit: type=1804 audit(1679448553.545:230): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/447/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0
[  389.209611][   T27] audit: type=1804 audit(1679448553.545:231): pid=13536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/491/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
[  389.299068][   T27] audit: type=1804 audit(1679448553.545:232): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/488/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  389.399031][   T27] audit: type=1804 audit(1679448553.555:233): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/478/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
[  389.550990][   T27] audit: type=1804 audit(1679448553.615:234): pid=13537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/478/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
01:29:14 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x9, 0x4, 0xb45, 0x800, 0xc}, 0x48)

01:29:14 executing program 1:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

[  389.631411][   T27] audit: type=1804 audit(1679448553.745:235): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/447/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0
01:29:14 executing program 5:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

01:29:14 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

01:29:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x10000a006)

01:29:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:14 executing program 1:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

01:29:14 executing program 5:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

01:29:14 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

01:29:14 executing program 1:
r0 = socket(0x2, 0x3, 0x3)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0ff7f}}, 0x0)

01:29:14 executing program 5:
r0 = socket(0x22, 0x2, 0x1)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))

01:29:14 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

01:29:14 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x9, 0x4, 0xb45, 0x800, 0xc}, 0x48)

01:29:14 executing program 1:
r0 = socket(0x2, 0x3, 0x3)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0ff7f}}, 0x0)

[  389.984009][   T27] audit: type=1804 audit(1679448554.565:236): pid=13563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/489/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
01:29:14 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:14 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

[  390.151405][ T6242] net_ratelimit: 4 callbacks suppressed
[  390.151423][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.165557][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.372601][   T27] audit: type=1804 audit(1679448554.955:237): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/479/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0
01:29:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:15 executing program 1:
r0 = socket(0x2, 0x3, 0x3)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0ff7f}}, 0x0)

01:29:15 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:15 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:15 executing program 1:
r0 = socket(0x2, 0x3, 0x3)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0ff7f}}, 0x0)

01:29:15 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  391.030934][ T5114] Bluetooth: hci4: command 0x040f tx timeout
01:29:15 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  391.191483][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.199754][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:16 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

[  391.514570][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.591211][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:16 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:16 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:16 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:16 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  392.234134][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.242615][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:16 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:17 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:17 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:17 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

[  393.111145][ T5114] Bluetooth: hci4: command 0x0419 tx timeout
[  393.272542][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.281254][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:18 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:18 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:18 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:18 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:18 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:18 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:18 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:19 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:19 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:19 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:19 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  395.352115][ T5161] net_ratelimit: 4 callbacks suppressed
[  395.352137][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.431601][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:20 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:20 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:20 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:20 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:20 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  396.420968][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:21 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  396.515221][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.661090][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:21 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:21 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:21 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:21 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  397.431397][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.591308][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:22 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

[  397.674491][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:22 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

[  398.260034][   T27] kauditd_printk_skb: 12 callbacks suppressed
[  398.260051][   T27] audit: type=1804 audit(1679448562.835:250): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/458/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
[  398.471432][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:23 executing program 1:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

[  398.543853][   T27] audit: type=1804 audit(1679448563.125:251): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/496/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0
[  398.632327][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:23 executing program 1:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

01:29:23 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:23 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:23 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:23 executing program 1:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

01:29:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:23 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

01:29:23 executing program 1:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

01:29:23 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

[  399.113270][   T27] audit: type=1804 audit(1679448563.695:252): pid=13777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/497/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
01:29:23 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

01:29:23 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x541b, &(0x7f00000001c0)=@add_del={0x2, 0x0})

[  399.230197][   T27] audit: type=1804 audit(1679448563.755:253): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/459/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0
01:29:24 executing program 0:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@random="6cb1e6d36aa9", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, "adf0abd4"}}}}, 0x0)

01:29:24 executing program 0:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@random="6cb1e6d36aa9", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, "adf0abd4"}}}}, 0x0)

01:29:24 executing program 0:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@random="6cb1e6d36aa9", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, "adf0abd4"}}}}, 0x0)

01:29:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:24 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000009258f9000000220095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x5f0, 0x4})
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000))
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x1, 0x0, 0x0)

01:29:24 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x10000a006)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080)

01:29:24 executing program 0:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@random="6cb1e6d36aa9", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, "adf0abd4"}}}}, 0x0)

01:29:24 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0)

01:29:24 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

01:29:24 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

[  400.312861][T13829] netlink: 'syz-executor.2': attribute type 36 has an invalid length.
01:29:24 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0)

[  400.356727][   T27] audit: type=1804 audit(1679448564.935:254): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/460/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0
[  400.513172][   T27] audit: type=1804 audit(1679448565.095:255): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/498/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
[  400.557670][   T22] net_ratelimit: 7 callbacks suppressed
[  400.557690][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.574029][T13841] netlink: 'syz-executor.2': attribute type 36 has an invalid length.
01:29:25 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0)

[  400.711469][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.869881][T13852] netlink: 'syz-executor.2': attribute type 36 has an invalid length.
01:29:25 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0)

01:29:25 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

01:29:25 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

[  401.132972][T13854] netlink: 'syz-executor.2': attribute type 36 has an invalid length.
01:29:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}}, 0x0)

01:29:26 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:26 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

01:29:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}}, 0x0)

01:29:26 executing program 4:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}}, 0x0)

[  401.591221][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}}, 0x0)

[  401.766765][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.779932][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.840116][   T27] audit: type=1804 audit(1679448566.415:256): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/461/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0
01:29:26 executing program 2:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:26 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

[  401.984371][   T27] audit: type=1804 audit(1679448566.515:257): pid=13885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3599429830/syzkaller.Vxc0Q4/15/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0
01:29:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

[  402.293861][T13888] veth0_vlan: left promiscuous mode
01:29:27 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

[  402.496004][T13879] warn_alloc: 10 callbacks suppressed
[  402.496025][T13879] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  402.566681][T13879] CPU: 1 PID: 13879 Comm: syz-executor.5 Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  402.577280][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  402.587385][T13879] Call Trace:
[  402.590704][T13879]  <TASK>
[  402.593681][T13879]  dump_stack_lvl+0x136/0x150
[  402.598425][T13879]  warn_alloc+0x213/0x360
[  402.602813][T13879]  ? zone_watermark_ok_safe+0x2e0/0x2e0
[  402.608450][T13879]  __vmalloc_node_range+0xf1c/0x1300
[  402.613831][T13879]  ? netlink_sendmsg+0x69e/0xe30
[  402.618840][T13879]  ? delayed_vfree_work+0x70/0x70
[  402.624051][T13879]  ? netlink_sendmsg+0x69e/0xe30
[  402.629060][T13879]  vmalloc+0x6b/0x80
[  402.633014][T13879]  ? netlink_sendmsg+0x69e/0xe30
[  402.638015][T13879]  netlink_sendmsg+0x69e/0xe30
[  402.642854][T13879]  ? netlink_unicast+0x7f0/0x7f0
[  402.647854][T13879]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  402.653899][T13879]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  402.659242][T13879]  ? netlink_unicast+0x7f0/0x7f0
[  402.664245][T13879]  sock_sendmsg+0xde/0x190
[  402.668741][T13879]  sock_no_sendpage+0x10c/0x160
[  402.673645][T13879]  ? sk_page_frag_refill+0x300/0x300
[  402.678971][T13879]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  402.685005][T13879]  ? lock_downgrade+0x690/0x690
[  402.689911][T13879]  ? find_held_lock+0x2d/0x110
[  402.694724][T13879]  kernel_sendpage.part.0+0x1d5/0x700
[  402.700139][T13879]  sock_sendpage+0xe7/0x180
[  402.704697][T13879]  ? kernel_sendpage+0xd0/0xd0
[  402.709498][T13879]  pipe_to_sendpage+0x2b1/0x380
[  402.714406][T13879]  ? propagate_umount+0x19f0/0x19f0
[  402.719662][T13879]  __splice_from_pipe+0x449/0x8a0
[  402.724746][T13879]  ? propagate_umount+0x19f0/0x19f0
[  402.729992][T13879]  generic_splice_sendpage+0xd8/0x140
[  402.735404][T13879]  ? __do_sys_vmsplice+0xaa0/0xaa0
[  402.740580][T13879]  ? security_file_permission+0xaf/0xd0
[  402.746166][T13879]  ? __do_sys_vmsplice+0xaa0/0xaa0
[  402.751338][T13879]  direct_splice_actor+0x114/0x180
[  402.756519][T13879]  splice_direct_to_actor+0x335/0x8a0
[  402.761950][T13879]  ? folio_flags.constprop.0+0x150/0x150
[  402.767645][T13879]  ? direct_splice_actor+0x180/0x180
[  402.772981][T13879]  ? bpf_lsm_file_permission+0x9/0x10
[  402.778412][T13879]  ? security_file_permission+0xaf/0xd0
[  402.783995][T13879]  do_splice_direct+0x1ab/0x280
[  402.788896][T13879]  ? splice_direct_to_actor+0x8a0/0x8a0
[  402.794505][T13879]  ? bpf_lsm_file_permission+0x9/0x10
[  402.799918][T13879]  ? security_file_permission+0xaf/0xd0
[  402.805511][T13879]  do_sendfile+0xb19/0x12c0
[  402.810061][T13879]  ? vfs_iocb_iter_write+0x480/0x480
[  402.815385][T13879]  ? xfd_validate_state+0x5d/0x180
[  402.820517][T13879]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  402.826453][T13879]  __x64_sys_sendfile64+0x1d0/0x210
[  402.831676][T13879]  ? __ia32_sys_sendfile+0x220/0x220
[  402.837003][T13879]  ? syscall_enter_from_user_mode+0x26/0xb0
[  402.842934][T13879]  do_syscall_64+0x39/0xb0
[  402.847376][T13879]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  402.853332][T13879] RIP: 0033:0x7f27a008c0f9
[  402.857800][T13879] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  402.877445][T13879] RSP: 002b:00007f27a0d26168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  402.885883][T13879] RAX: ffffffffffffffda RBX: 00007f27a01ac050 RCX: 00007f27a008c0f9
[  402.893880][T13879] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009
[  402.901863][T13879] RBP: 00007f27a00e7b39 R08: 0000000000000000 R09: 0000000000000000
[  402.909858][T13879] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000000
[  402.917859][T13879] R13: 00007ffd298059af R14: 00007f27a0d26300 R15: 0000000000022000
[  402.925881][T13879]  </TASK>
[  402.939211][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.947383][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.955783][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:27 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$inet6(0xa, 0x800, 0x7f)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c)
unshare(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c)

01:29:27 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

[  403.229994][T13879] Mem-Info:
[  403.233552][T13879] active_anon:23486 inactive_anon:480 isolated_anon:0
[  403.233552][T13879]  active_file:0 inactive_file:17282 isolated_file:0
[  403.233552][T13879]  unevictable:768 dirty:327 writeback:0
[  403.233552][T13879]  slab_reclaimable:20947 slab_unreclaimable:110912
[  403.233552][T13879]  mapped:20625 shmem:2061 pagetables:589
[  403.233552][T13879]  sec_pagetables:0 bounce:0
[  403.233552][T13879]  kernel_misc_reclaimable:0
[  403.233552][T13879]  free:1386596 free_pcp:11001 free_cma:0
[  403.295981][T13879] Node 0 active_anon:94044kB inactive_anon:1920kB active_file:0kB inactive_file:69052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84500kB dirty:1304kB writeback:0kB shmem:6708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:2356kB sec_pagetables:0kB all_unreclaimable? no
[  403.375044][T13879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  403.487068][T13879] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  403.515129][   T27] audit: type=1804 audit(1679448568.085:258): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/485/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
[  403.544538][T13879] lowmem_reserve[]: 0 2617 2619 2619 2619
[  403.556604][T13879] Node 0 DMA32 free:1601048kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:94080kB inactive_anon:1916kB active_file:0kB inactive_file:67816kB unevictable:1536kB writepending:1624kB present:3129332kB managed:2685112kB mlocked:0kB bounce:0kB free_pcp:28228kB local_pcp:14680kB free_cma:0kB
[  403.587918][T13879] lowmem_reserve[]: 0 0 1 1 1
[  403.605826][T13879] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1536kB unevictable:0kB writepending:4kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  403.637375][T13879] lowmem_reserve[]: 0 0 0 0 0
[  403.642521][T13879] Node 1 Normal free:3928492kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:16896kB local_pcp:11584kB free_cma:0kB
[  403.680456][T13879] lowmem_reserve[]: 0 0 0 0 0
[  403.697808][T13879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  403.711316][T13879] Node 0 DMA32: 110*4kB (UE) 86*8kB (M) 559*16kB (ME) 631*32kB (UME) 284*64kB (UME) 113*128kB (UME) 60*256kB (UME) 22*512kB (UME) 11*1024kB (UME) 2*2048kB (UE) 365*4096kB (UM) = 1599928kB
[  403.741120][T13879] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  403.762644][T13879] Node 1 Normal: 167*4kB (U) 46*8kB (UME) 26*16kB (UE) 136*32kB (UME) 32*64kB (UME) 8*128kB (UE) 1*256kB (U) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 955*4096kB (M) = 3928492kB
[  403.790007][T13879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.800043][T13879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.809773][T13879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.826171][T13879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.837497][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:28 executing program 4:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:28 executing program 0:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "9f8fe8320d3346b4ca56ccee2d0601ffc5e499b45a355e17332952be881b674ecb8efb85e629fed267cde851032a14183b763742d578ab91737aea2843883eb44eedbf5bbe8031ec49f9f27ca58d41bd542b58d987b2f24f1f17605a1339159d0edae0306c513b6379ec65a5a2264a2e08e1e50a9535df4f24715afb430f1a3ed34cfd932ee075ce106fe2d74ed8a7e4f0301f10c3cfbb5cbe08daa04fd47cea344ac828ff573feefbc9e7f35a4035a50a6170a2b5530fa15c924ad9832517f56a7709d4a2d85820865819566fd5dd2191a63adf2a6b4f34e1ea4f3b252ae891cc01b0aeeaabdd266264c0c0a1ca232d5080c3e543e0b2c0a0a250930300dcd4", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:28 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

[  403.850016][T13879] 19214 total pagecache pages
[  403.850594][ T8278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.855211][T13879] 0 pages in swap cache
[  403.867384][T13879] Free swap  = 0kB
[  403.871604][T13879] Total swap = 0kB
[  403.875381][T13879] 2097051 pages RAM
[  403.879200][T13879] 0 pages HighMem/MovableOnly
[  403.888016][T13879] 392127 pages reserved
[  403.893495][T13879] 0 pages cma reserved
01:29:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:28 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

[  404.043016][   T27] audit: type=1804 audit(1679448568.625:259): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3599429830/syzkaller.Vxc0Q4/16/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0
[  404.142256][   T27] audit: type=1804 audit(1679448568.675:260): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/486/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
[  404.263036][   T27] audit: type=1804 audit(1679448568.695:261): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/512/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0
[  404.406036][   T27] audit: type=1804 audit(1679448568.985:262): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2952059267/syzkaller.HwuYXe/502/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  404.523671][   T27] audit: type=1804 audit(1679448568.985:263): pid=13937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3171178195/syzkaller.WwmfVk/462/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
01:29:29 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

[  404.928596][   T27] audit: type=1804 audit(1679448569.505:264): pid=13944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/487/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0
01:29:30 executing program 2:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:30 executing program 4:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "9f8fe8320d3346b4ca56ccee2d0601ffc5e499b45a355e17332952be881b674ecb8efb85e629fed267cde851032a14183b763742d578ab91737aea2843883eb44eedbf5bbe8031ec49f9f27ca58d41bd542b58d987b2f24f1f17605a1339159d0edae0306c513b6379ec65a5a2264a2e08e1e50a9535df4f24715afb430f1a3ed34cfd932ee075ce106fe2d74ed8a7e4f0301f10c3cfbb5cbe08daa04fd47cea344ac828ff573feefbc9e7f35a4035a50a6170a2b5530fa15c924ad9832517f56a7709d4a2d85820865819566fd5dd2191a63adf2a6b4f34e1ea4f3b252ae891cc01b0aeeaabdd266264c0c0a1ca232d5080c3e543e0b2c0a0a250930300dcd4", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:30 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:30 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:30 executing program 0:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "9f8fe8320d3346b4ca56ccee2d0601ffc5e499b45a355e17332952be881b674ecb8efb85e629fed267cde851032a14183b763742d578ab91737aea2843883eb44eedbf5bbe8031ec49f9f27ca58d41bd542b58d987b2f24f1f17605a1339159d0edae0306c513b6379ec65a5a2264a2e08e1e50a9535df4f24715afb430f1a3ed34cfd932ee075ce106fe2d74ed8a7e4f0301f10c3cfbb5cbe08daa04fd47cea344ac828ff573feefbc9e7f35a4035a50a6170a2b5530fa15c924ad9832517f56a7709d4a2d85820865819566fd5dd2191a63adf2a6b4f34e1ea4f3b252ae891cc01b0aeeaabdd266264c0c0a1ca232d5080c3e543e0b2c0a0a250930300dcd4", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:30 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

[  405.836961][   T27] audit: type=1804 audit(1679448570.415:265): pid=13956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/513/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0
[  405.998064][   T27] audit: type=1804 audit(1679448570.575:266): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3599429830/syzkaller.Vxc0Q4/17/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
[  406.071448][ T6248] net_ratelimit: 7 callbacks suppressed
[  406.071466][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.082558][   T27] audit: type=1804 audit(1679448570.655:267): pid=13959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3095285327/syzkaller.qtxJB6/488/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
[  406.086021][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:31 executing program 0:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:31 executing program 2:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:31 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:31 executing program 4:
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500de0000000000138ec49caa17644e48"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x81, "7464fbe08eb369"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={r12, 0x100000000})
socket$netlink(0x10, 0x3, 0xf)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x81, "7464fbe08eb369"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000588c0)={0x0, <r16=>0x0, "9f8fe8320d3346b4ca56ccee2d0601ffc5e499b45a355e17332952be881b674ecb8efb85e629fed267cde851032a14183b763742d578ab91737aea2843883eb44eedbf5bbe8031ec49f9f27ca58d41bd542b58d987b2f24f1f17605a1339159d0edae0306c513b6379ec65a5a2264a2e08e1e50a9535df4f24715afb430f1a3ed34cfd932ee075ce106fe2d74ed8a7e4f0301f10c3cfbb5cbe08daa04fd47cea344ac828ff573feefbc9e7f35a4035a50a6170a2b5530fa15c924ad9832517f56a7709d4a2d85820865819566fd5dd2191a63adf2a6b4f34e1ea4f3b252ae891cc01b0aeeaabdd266264c0c0a1ca232d5080c3e543e0b2c0a0a250930300dcd4", "f5a31498b9de3d5ba2ec4a3c2c146cf48bc474d3be1ab1420419f8ca7aad9daac5a61c5fae64b4070ef4a584edeb7f67c0187721e6f8946b2b06044ff86e5b80ca4193cb76cceed578a1130c8c455e7a203be8ef6e1d735ed8bfcd3662f12fcb43e418caf08bcdfefc2a58696e11e326881b3e3217db248419b971a9653276ae14398c322a9e826d48c5d9ab2809c62e72b0a593f54337dcde0ca64d87480dc1fa17d4c3b8088845eb26c4c27ab1c2d65d1ce81d9c3163577e52c470f4bb9868df9618987f93f5583691b8954f3dec9a67982615a5e63071b08210a48cef009c9adce4d9af26b44152628525f0347c0d7cd4aea39a9ccf670e8581deb8e984827db68ddae2cd6fe3b305440e1bb098057b40e9a9d161a584104f9436c66b021f922b5e6d21eace7f3bd771ba9fca73a8c59d8bb3480d5430e2954f2079f1c7419c350fb4156698afda617fa19e424dc11b9b4c613cb2471242ba0d7aab1c2d918853829dbac5ea618cdfc0ccfc468be325784330fd1add8c861791a635fd0c680cb2191099e5c3758844ce89e4dc69b9838de41ea6a489aab1d0048efa15c822edf2e192ddef36b4816b4d64a1b2a0e649ac0a23e2cf68e359243b62d05492f342ae574c97899608f9a59cf379d6a1a2fd157568bdf0eef19c46abf6689b3b7fc9480ef52614c907bf892af595bd0e115f6a974198b701559027df70593afda40cd3139c9f6483c3c24eba26e919592638d1c62f3774184867d91c397992b96da754990a2f297bfcf4e52db6c76da5e14afe7b934f0b3a09a566c00286a17a2292717bb116adcd15d1adb97c71fab4ac857ce7cf55b8b72cb2db3e5379be3342643033063f790ee9ff8df7398e1710b956fc2740b76b08ef7b84a93a7a9af1518a41d8f194b221ec812c9c7f92b465cd8084d400092e51ef7c8d94c7f8405c34fb16585beb9479014cc5dc90d35890e95ed6e250b0504d0f734ea2b056d07de4cb6177faafb0cd640db28eaa73b37b1b0f81e16f27bb0eb0c26b4f0125ef84b5dc8a479f07405d36b675f1d4ff2ecaad2f6edb03385ef1a71366d6b23da27f0928342d504a21fdec7b54e959221c105bc1f5f1b0ce02bb021586beafe2818238bd516a45c32dcc4eda1f6e6c76652c2105ce6a3ff15f9b2b7f048ab9a5c80940be2ed82aba044c8c6c2b8bb03703aef7f64115164ee514db9a528c7166f57c32631257ca9cc49b6a31f6e9590412c3af824ed90467e5fe1e3994c3bda59037a2e5b46a492b86ea43c6ec3f4904ed42b6ef16f521fee9e20481d04d157059f601029039e966a2dd2b51fb2e3209450177cf4778950e32a7bcbc5a3f88ac01ea183de0739c159bb2d9ee341b9ef6e1b4a35d0e9174148d3c547c9f59c3a8801c88cd29917a54eb3196f591f434dd8fa90843c1a9ee4490ea0f07bb04ebeac851b7a01101b8f36f12721260cb7864dd89c8b63358101fb2045710b7b7b9aeb410530a1841883a650bb5a7b17937858324804e32b92835b11e69948615d607b2e5f56913c39053ba665bb5a9f91f77b4da68aa567070e2bb59ddb34b9ce5ea34a8bbcb0adeb47ad2a8d62a5579768bbf1cb50329418f3eb50d03444e2f62ebbd7f6b041c59082ee3e1f204674b8b2a4b7281a16047b954658f90a986eec6ea7e0fd5276ac70cceccfeb3b13a4dbe0f25057b7eea608ea21dce90078f4fa8f03d8766a7024db70f1c1ca749b393cda0bcbb401464212b081d8a2d5e976e9539e8323ee5350026273679bd80181feb770d4d9d0ca2299aa9a5daae248958ed7439c3a41f9b1c9483be9237d4e44bd7447ab1af8d8361b109407e86c1b4102149e2c1552a2d2d07c0ed17120a9e612b6d29cf20d4eb8769444816cd20f7b39e270a39000b95d2c06893e8d5de865a1505d16014644417fcef446179c28b5b37c2f6be039cd8a6ba91e0a7d4329ca5be02fb8f69b1bcbaacb736d4be5de8045bf70df8d9066e6f04bc0b03e722b2baa6c818de843a6e5b4b68ca0e60f78f20f154338b30b0798b01bea1f1fcbb343725c9997505163d8016f2e3a799063eabb3b48c57688dd5b4fc533d880087f0e953bab4ed0ab58007b59c0d3a563c0d71385ed75fa0f57fae4cb1f36050199de072837b9f2254db57ff100a3bfa8ece2e90446e0f502d458c903d86d12ba952bb623275b192ec97312ac72a7a4e91146cf7d82e92ee90011f774cbc1a6cbadc530702fd861e63bca24295fd4193b2636209ab89b19d496666dc5576df0b5e152b902ed1127cc1b484165053a3f090e27144de5689002665fd0a6b01b774da8d04c0144cbf7436f4e9c56d9638b78be9555372124f9982f245f511c2eb7c6fd62089de1c8e460bc096a5b6da74986d3889c258ad0e4798fdffaf05ce25c30af1ae98a62f9c368621e96dbd177ea547571a215a72554010f4f1fae89abad1ee7fb43673d0425b92cf65f3b26140cc4eb753d4103920f1260e8936987e003fbd88999b83d05900003c3802b141830ad70864cbf19250c78c1ce826cb0fbdec35db8c3eb54ae98d3b8dd42eae0b16d8bbf9faaca0badc59953a4f4047e4d2c40125e10db3946fa753b12d2894d6e9780429728cef353c6c5464e3c9790ebbc2acd14ed917f926be3f73010f8230240394b7029fcaf1753218de4807d5e38a78d4dbbab6be900617848717064be9887829eaae4da3d6a1eaa164fcaab384a84256ed14c27c423223850a5c8a3e27900c7322754894181d99dcde80fe399faf531ec84e8e94b8c2728baffaeef46748e84f6528718f6432390f2cdb7b4e64ecb042ec151c1deadc06fdcaa1a831bd5817baf2daac446ba949c901d321ffb549637f095d1bedefbe5a5f825af100a7dff7cede79eecf0f0109798b3ef7a4a33d3e3f0e2e2e64669867040d33da0973a8c42be18f40cb0db37763ef8a276b360c9dc9a44db4618dc591da9df0ec4e813b0fd1725d40e51234642601fddf1bf5270316e49bf5088e579048ab63f4d3b4094990da62934826495404cb033e96545cce56501a35157c8462c9490910324f311c8c40d293e5517e9619a4fe63c2655643557cf2b04a2af405a744a691a7f4175ba5b8f7c04c2edf7c8aebe6b1011d33ee219eb3a319a794de4d60f5d151dc8f3f36900c2ce51db9e8d889ba65f0abdc227554263dbd4ed9682ef8f24811861c789a9740882e6c845ef943bfb36b1c39c8eedb7cb9c8d2b1b50960a68afc744db69b08cbb6c9fb3656575f3160c0266be9e97d771f1d6c46872a63f9fb0e22488595593088a0b9a7a85cf5071b75c4459743df1702100d694546c9e33c88ac035a541d795eee817eeca064d3896a4ec0f8976b0ee1113e1335a15f04af219e00ff0c7ab08c885956e4ad30d22f0391a13f251c1817de31b484e2d8fab14aac2d17c850fdbaf0f1d51a9c188a50f4051333416e4d862754f8d24746cc933aacdd5a6cc809e1e6869649698a0e1fa062b6c32df4920eb973ed1fef8bfb69e22621c7a6243e7d948fd9acbd9668cab4dc54631bf046cbbceb353d6ff08f054f7924050d23a1ca135f397bcc2aa2a5cdbac87265ae5abdca6190096855cdfddbfb28adea632410d1e56c8e93895edf29abc76c7fea97606f8b6ec206524d25c7090ebb4f12ee06844fa556b406de4760fad38a72ab754e737cbfa473fe9e38d9cedc008a1e8b5c6eba5632471aeae3f2d10f8364b239664dacdbde6efa56d43049468fd7105adef112478cc1df56a8535edc3f0e3aa815f320c05af1e00adca2ab56cc20b45de32592a918746dff66e8564af6bc16055e47b583b0b78c05d8d22f14e5a59fae32995cb81ed44525e78962b0f43f08be12703e17dff5cd7ee2d3aaac479e8f88da3502c7f1ebf3c991bd3ef57717c05a54fa18f1a3f6c7a69a19e5f8e0a4ed832b1c3b814ee16e54526aa5bc7a8200d4ecf40764e0bf73bc4a9ae4156e2b5d6fa7ebaade1af54f07ce1b0eea4a4c9d063db766c4b9ef885bb0bcb8ebfdfc8c177c7e2973474bc0b83dd1a32c830f754fac545eb8d34ea64ff0ce7c726e22b233a4baf7dbb8e733b10a551296cadb06d8542f1f6f6093eea4e6574088ab8c306902628403333d9f5a17fa9c33300c4e30774a389a72efbadb65cb9be472983fc349cf9ac91d50f9fc7fa0e74399ac38b76ef18ed8f0e158a98712ecb19f143574f3dfc6a123148b156f279328ab51b480c071ac915a7ed8f546858961bc6eef95466bc722c50fc7fc827374e9d164b6a6670ce987aac9e5a5143eea55bdc8147a4a45d0338ebb81179ba02d193a4ff174ab80140ec994ae018efe480029428ce1bb738b51ce6bcd925cac51a84263be6b281ad8cacda6f0b8e9f43dd5906e8a1b9bcc9113815057520f8d101b06ee4257d468b366e337dbc507b6f5a93aa7b140620b8dd985fef14c1cab96efd81d7d6ffe064a01430eb5318d057ec0812eff17a9399bae02e9f1cece921eac07952490d88dd14609858bc5222009588242fa54b5c7f08e4f78ce023c609f26561d0e8d36c58f3f3c1bef32d54d7ce7cdb83794252848c11f0bcb3b9c59227015514d9cc1a0bba5101e6a5f46b96e22ffbbab9272d3b838523ad48148a562c870f6170488672c2113a519a39e2dca410986c19accf9b601fb17c94b8d6a88e111d3ce72c200c980ea1ac05aeacbb413bed9fd240d073933e20fba958af1af3c3f32019e52f98b6a469ceaaf6607589846d2eb98a12ae2cab5c16f817528e9b5ed50c9de16b4be340a49f7f26cf585f1bff4716e730fea0148518b2d30ad736f2b3a7c9d346a706e98f8ba3be601c1051b358c255ba9e465f69316834c9befc80c1f353dcf0ffd559d8a45a28a867e1ba893ada10e01011992c93ec896c64d8d67f891a6a91380c3ddf6c7bed0b8d30d490951b2472ea048276fcdf987e8e447c3d4908bc34597a8540eafb292dce1cdfc45ba4fff45a3eee3b079815ae3ec9e2e4eec22ddab6d2b280d153a4ce38ad461afba60d3233049710da19944867164ed413d308c5ad1a6e253c1515e7a1b28f54748c15289a2ec95763030827df35f64735abe96ba9893b2ba04011a14526bab2ec74809191b50790d986c23dbf029fcfd7953a58ab28d939b6684bf607da77d01ca1424e6e74cf08b609292990ebf41b1691dee881db396f7531a2c78ad9cb2b71c3711bfbb3ed9668b17e737a90468d9a1b43f3473b20be64b007889718037973bd00a60237fa5f5dd542f9ba2850aebeb8109c168e4516d8f457f8b6f87341938f3b237ec05c1cf42e46966a8ab2ac77850b9922fe456dda05aff05a86575c3eb3ac55ef39a9246dc7d45b089e96320d593ddd08cac746e759ba2633b6fe029a3a1eacd3abca4f60f529aeb0ae1f26f3cf02662636d64"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059ac0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r16}, {r17}], 0x7f, "06cc914ff2ebcd"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cfc0)={0x8000000000000001, [], 0x4, "72825341db173c"})
r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000041b832f6fa6d93472d9bf1680dd2b36389203254bb526bf36c0109a7c755ed04e21840178b0cc04f6b5e628ac3749b930bafafa7f96162ca1720e221a0701f30f197115a9dbf6e62443da400c9f9e8d943ac11002567b92533136a66b5e7b3cb395d8a62a3c2b647214ec6a26adbf11e75d75560a154ec9d0e6b31cba11de3d0c10f5f2b77f29592b5e6461ffb1100", @ANYRES16=r19, @ANYBLOB="000128bd7000fddbdf250d00000008002c00ffffff7f08000600", @ANYRES32=0x0, @ANYBLOB="050038000100000008002c000000f7ff0400060000000000000039000100010028002c00030000000800320003000000050035005d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x800)
r20 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r18, @ANYBLOB="ff830000280000000000", @ANYRES32=r20], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

01:29:31 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

[  406.871149][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.112278][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.120860][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:31 executing program 0:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:32 executing program 2:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:32 executing program 4:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:32 executing program 5:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:32 executing program 1:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

[  407.831260][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:32 executing program 3:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

[  408.151363][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.168265][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:32 executing program 0:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:33 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

[  408.990412][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  408.990430][   T27] audit: type=1804 audit(1679448573.565:276): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/501/cgroup.controllers" dev="sda1" ino=1140 res=1 errno=0
01:29:33 executing program 4:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

[  409.191384][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.201938][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
01:29:33 executing program 0:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

01:29:34 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:34 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:34 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

01:29:34 executing program 4:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

[  410.033643][   T27] audit: type=1804 audit(1679448574.615:277): pid=14029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/518/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0
[  410.114735][   T27] audit: type=1804 audit(1679448574.685:278): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4286017607/syzkaller.m6lRiz/503/cgroup.controllers" dev="sda1" ino=1147 res=1 errno=0
[  410.573433][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  410.581598][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  410.589573][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  410.597969][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  410.605361][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
01:29:35 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48890)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3a"], 0x448}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x10000a006)

[  410.707355][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  410.720287][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  410.730364][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  410.739401][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  410.749033][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  410.757187][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  410.969871][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  410.980385][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  411.007018][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  411.038277][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  411.046378][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  411.054563][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  411.271170][ T6248] net_ratelimit: 6 callbacks suppressed
[  411.271220][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.285344][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.341793][   T27] audit: type=1804 audit(1679448575.925:279): pid=14055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir612207402/syzkaller.QBfdxW/519/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0
[  411.351912][T14042] chnl_net:caif_netlink_parms(): no params data found
[  411.623596][T14044] chnl_net:caif_netlink_parms(): no params data found
[  411.670503][T14042] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.678003][T14042] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.685730][T14042] bridge_slave_0: entered allmulticast mode
[  411.695270][T14042] bridge_slave_0: entered promiscuous mode
[  411.714148][T14049] chnl_net:caif_netlink_parms(): no params data found
[  411.756882][T14042] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.764256][T14042] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.773006][T14042] bridge_slave_1: entered allmulticast mode
[  411.779757][T14042] bridge_slave_1: entered promiscuous mode
[  411.914834][T14042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.929480][T14042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.034082][T14042] team0: Port device team_slave_0 added
[  412.062991][T14044] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.070118][T14044] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.078581][T14044] bridge_slave_0: entered allmulticast mode
[  412.086320][T14044] bridge_slave_0: entered promiscuous mode
[  412.096475][T14042] team0: Port device team_slave_1 added
[  412.159349][T14044] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.166757][T14044] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.174322][T14044] bridge_slave_1: entered allmulticast mode
[  412.181469][T14044] bridge_slave_1: entered promiscuous mode
[  412.199661][T14049] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.206810][T14049] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.214294][T14049] bridge_slave_0: entered allmulticast mode
[  412.221505][T14049] bridge_slave_0: entered promiscuous mode
[  412.231995][T14049] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.239145][T14049] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.246507][T14049] bridge_slave_1: entered allmulticast mode
[  412.253720][T14049] bridge_slave_1: entered promiscuous mode
[  412.311158][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.319674][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.349345][T14042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.360419][T14042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.386781][T14042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.421806][T14049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.436992][T14049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.449202][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.459235][T14042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.466382][T14042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.498138][T14042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.522516][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.602904][T14049] team0: Port device team_slave_0 added
[  412.614563][T14044] team0: Port device team_slave_0 added
[  412.631723][T11972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.632845][ T5114] Bluetooth: hci1: command 0x0409 tx timeout
[  412.649462][T14049] team0: Port device team_slave_1 added
[  412.660536][T14044] team0: Port device team_slave_1 added
[  412.674119][T14042] hsr_slave_0: entered promiscuous mode
[  412.680371][T14042] hsr_slave_1: entered promiscuous mode
[  412.695553][T14042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  412.703991][T14042] Cannot create hsr debugfs directory
[  412.784778][T14049] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.790936][ T5114] Bluetooth: hci2: command 0x0409 tx timeout
[  412.792041][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.824105][T14049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.837124][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.845201][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.871982][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.885888][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.893172][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.922059][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.940643][T14049] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.949271][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.975706][T14049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.073124][T14049] hsr_slave_0: entered promiscuous mode
[  413.079679][T14049] hsr_slave_1: entered promiscuous mode
[  413.085969][T14049] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  413.105285][T14049] Cannot create hsr debugfs directory
[  413.111006][ T5100] Bluetooth: hci3: command 0x0409 tx timeout
[  413.136584][T14044] hsr_slave_0: entered promiscuous mode
[  413.151907][T14044] hsr_slave_1: entered promiscuous mode
[  413.169446][T14044] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  413.177295][T14044] Cannot create hsr debugfs directory
[  413.353265][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.362762][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.461882][T14042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.607376][T14042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.754580][T14042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.894080][T14042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.991145][T11972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.391289][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.411802][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.599346][T14049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.711244][ T5100] Bluetooth: hci1: command 0x041b tx timeout
[  414.737217][T14049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.870844][ T5100] Bluetooth: hci2: command 0x041b tx timeout
[  414.879225][T14049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.996995][T14049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.118814][T14044] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.190908][ T5100] Bluetooth: hci3: command 0x041b tx timeout
[  415.246440][T14044] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.384999][T14044] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.511322][T14044] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.680868][T14042] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  415.690196][T14042] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  415.700283][T14042] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  415.723954][T14042] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  415.763253][T14049] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  415.775105][T14049] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  415.806814][T14049] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  415.832340][T14049] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  415.883214][T14044] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  415.893316][T14044] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  415.911145][T14044] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  415.942059][T14044] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  415.982704][T14042] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.033107][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  416.042404][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  416.071839][T14042] 8021q: adding VLAN 0 to HW filter on device team0
[  416.088587][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  416.097691][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  416.107289][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.114432][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.129676][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  416.138171][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  416.147253][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  416.156225][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.163552][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.197211][T14049] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.208503][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  416.224629][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  416.245827][T14044] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.280072][T14049] 8021q: adding VLAN 0 to HW filter on device team0
[  416.291379][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  416.303042][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  416.311997][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  416.320765][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  416.330316][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  416.339237][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  416.347936][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  416.356874][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  416.365537][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  416.373760][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  416.382024][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  416.389739][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  416.398267][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  416.410246][T14044] 8021q: adding VLAN 0 to HW filter on device team0
[  416.422697][T14042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  416.471872][ T6249] net_ratelimit: 3 callbacks suppressed
[  416.471890][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.485918][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.501617][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  416.510421][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  416.521403][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.528517][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.537397][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  416.547090][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  416.556133][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.563818][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.571868][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  416.581380][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  416.589861][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.597014][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.605450][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  416.615531][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  416.624679][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  416.635233][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.642403][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.694464][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  416.710431][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  416.719398][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  416.741995][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  416.761677][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  416.782361][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  416.790986][ T5100] Bluetooth: hci1: command 0x040f tx timeout
[  416.801586][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  416.810506][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  416.821511][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  416.830439][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  416.849048][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  416.879598][T14044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  416.898919][T14044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.922631][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  416.936982][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  416.946880][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  416.955040][ T5100] Bluetooth: hci2: command 0x040f tx timeout
[  416.963504][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  416.972962][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  416.981981][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  416.990389][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  416.999943][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  417.009011][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  417.018598][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  417.028108][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  417.037338][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  417.041381][T11972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.046947][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  417.061274][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  417.070180][T14049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  417.084889][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  417.107510][T14042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.189137][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  417.202057][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  417.251713][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  417.271528][ T5114] Bluetooth: hci3: command 0x040f tx timeout
[  417.272808][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  417.303824][T14042] veth0_vlan: entered promiscuous mode
[  417.328332][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  417.342241][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  417.365745][T14042] veth1_vlan: entered promiscuous mode
[  417.428335][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  417.438247][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  417.461488][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  417.470243][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  417.495400][T14042] veth0_macvtap: entered promiscuous mode
[  417.511957][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.520436][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.541619][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  417.550133][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  417.558491][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  417.568821][T14042] veth1_macvtap: entered promiscuous mode
[  417.586355][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.604714][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.629269][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.654683][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.666621][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.676654][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.687429][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.697637][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.708246][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.718991][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.729549][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.740158][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.761531][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.771836][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.782646][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.794825][T14042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.810001][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  417.829786][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  417.839674][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  417.870355][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.882501][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.892870][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.903689][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.915161][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.926061][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.936282][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.947104][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.957274][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.974903][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.985556][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.997434][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.007613][T14042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.018373][T14042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.029946][T14042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.037724][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  418.045548][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  418.053459][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  418.062500][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  418.078002][T14049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.092466][T14042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.110682][T14042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.119428][T14042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.140265][T14042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.255109][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  418.264630][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  418.292473][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  418.301602][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  418.344220][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  418.353409][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  418.375747][T14044] veth0_vlan: entered promiscuous mode
[  418.393386][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  418.401704][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  418.409559][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  418.418262][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  418.428612][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  418.437127][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  418.449444][T14044] veth1_vlan: entered promiscuous mode
[  418.459673][T14049] veth0_vlan: entered promiscuous mode
[  418.470011][ T8278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.493645][ T8278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.505828][T14049] veth1_vlan: entered promiscuous mode
[  418.529450][T14044] veth0_macvtap: entered promiscuous mode
[  418.548053][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  418.553096][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.563716][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  418.572453][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  418.582199][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  418.590084][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  418.599050][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  418.609138][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  418.609985][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.620294][T14044] veth1_macvtap: entered promiscuous mode
[  418.668823][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.673429][T14049] veth0_macvtap: entered promiscuous mode
[  418.679153][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.707452][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  418.716348][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  418.724683][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  418.733866][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  418.742752][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  418.755600][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.770080][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.771022][ T5163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.795534][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.807017][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.817116][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.827766][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.837797][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.849620][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.860007][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.871510][ T5114] Bluetooth: hci1: command 0x0419 tx timeout
[  418.873505][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.889422][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.905471][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.916109][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.926789][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.936947][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.947885][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.961664][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.971878][T14049] veth1_macvtap: entered promiscuous mode
[  418.981098][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  418.991632][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  419.005019][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  419.025349][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  419.033598][ T5114] Bluetooth: hci2: command 0x0419 tx timeout
[  419.044615][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.057208][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.067744][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.078413][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.088351][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.100477][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.110441][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.122189][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.132405][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.142951][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.152843][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.164972][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.174926][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.185512][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.201185][T14044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.212075][T14044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.224251][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.247020][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.276294][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.300981][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.323908][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.344441][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.359446][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.369947][ T5114] Bluetooth: hci3: command 0x0419 tx timeout
[  419.375721][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.386767][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.406725][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.417590][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.432361][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.443247][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.455434][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.466213][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.476362][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.487127][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.497392][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.510382][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.523032][T14049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.530554][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  419.540171][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  419.549596][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  419.558693][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  419.579406][T14044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.588913][T14044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.598169][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.609254][T14044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.618317][T14044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.649072][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.660672][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.670564][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.683959][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.685760][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.702860][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.714575][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.724460][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.735947][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.745843][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.757217][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.767391][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.777968][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.787883][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.799500][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.812895][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.823943][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.845034][T14049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.863040][T14049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.878018][T14049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.903040][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  419.913689][  T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  419.932776][T14049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.942710][T14049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.952220][T14049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.961691][T14049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.200575][ T8278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.210807][ T8278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.230286][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  420.290573][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.299142][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.307991][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.327399][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.331082][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  420.351452][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  420.434939][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.446389][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.488444][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:29:45 executing program 5:
unshare(0x4c060000)
mmap(&(0x7f000069a000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000d000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x2f, 0x0, 0x0, 0x5fffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r1]}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x950d, 0x0, 0x0, 0x0, 0xeb59}, [@jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x88}, @ldst={0x0, 0x0, 0x3, 0xe, 0x5, 0x50, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000000), 0xffe000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0xb06, 0x6}, 0x10}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
unshare(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
unshare(0x12030c00)
unshare(0x10000a00)

[  421.223542][ T5177] vlan4: left allmulticast mode
[  421.229036][ T5177] vlan4: left promiscuous mode
[  421.236415][ T5177] bridge5: port 1(vlan4) entered disabled state
[  421.259581][ T5177] vlan3: left allmulticast mode
[  421.264643][ T5177] vlan3: left promiscuous mode
[  421.269698][ T5177] bridge3: port 1(vlan3) entered disabled state
[  421.281875][ T5177] vlan2: left allmulticast mode
[  421.286915][ T5177] vlan2: left promiscuous mode
[  421.292329][ T5177] bridge1: port 1(vlan2) entered disabled state
[  421.313806][ T5177] hsr_slave_0: left promiscuous mode
[  421.326577][ T5177] hsr_slave_1: left promiscuous mode
[  421.339832][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.358511][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.378189][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.398798][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.413715][ T5177] bridge_slave_1: left allmulticast mode
[  421.419520][ T5177] bridge_slave_1: left promiscuous mode
[  421.431600][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.455486][ T5177] bridge_slave_0: left allmulticast mode
[  421.461434][ T5177] bridge_slave_0: left promiscuous mode
[  421.467283][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.517771][ T5177] veth1_macvtap: left promiscuous mode
[  421.529733][ T5177] veth0_macvtap: left promiscuous mode
[  421.545839][ T5177] veth1_vlan: left promiscuous mode
[  421.671510][ T6248] net_ratelimit: 3 callbacks suppressed
[  421.671538][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.751490][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.831464][T11972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.948871][ T5177] bond3 (unregistering): Released all slaves
[  421.970512][ T5177] bond2 (unregistering): Released all slaves
[  422.009259][ T5177] bond1 (unregistering): Released all slaves
[  422.458391][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  422.467381][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  422.478393][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  422.486683][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  422.494479][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  422.711229][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.791384][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.848416][ T5177] team0 (unregistering): Port device team_slave_1 removed
[  422.862940][ T5177] team0 (unregistering): Port device team_slave_0 removed
[  422.882230][ T5177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.900356][ T5177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.007622][ T5177] bond0 (unregistering): Released all slaves
[  423.125087][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.374796][T14101] chnl_net:caif_netlink_parms(): no params data found
[  423.458912][T14101] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.473765][T14101] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.482747][T14101] bridge_slave_0: entered allmulticast mode
[  423.489805][T14101] bridge_slave_0: entered promiscuous mode
[  423.501270][T14101] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.508465][T14101] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.517108][T14101] bridge_slave_1: entered allmulticast mode
[  423.524266][T14101] bridge_slave_1: entered promiscuous mode
[  423.558979][T14101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.574967][T14101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.636970][T14101] team0: Port device team_slave_0 added
[  423.659879][T14101] team0: Port device team_slave_1 added
[  423.724049][T14101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.735657][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.762085][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.789751][T14101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.820531][T14101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.831158][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.835522][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.899706][T14101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.008271][T14101] hsr_slave_0: entered promiscuous mode
[  424.025658][T14101] hsr_slave_1: entered promiscuous mode
[  424.047531][T14101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  424.073759][T14101] Cannot create hsr debugfs directory
[  424.316205][T14101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.435309][T14101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.560936][ T5114] Bluetooth: hci3: command 0x0409 tx timeout
[  424.601695][T14101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.784502][T14101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.795463][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.871953][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.791859][ T5177] tipc: Left network mode
[  426.630963][ T5114] Bluetooth: hci3: command 0x041b tx timeout
[  426.875520][   T22] net_ratelimit: 4 callbacks suppressed
[  426.875539][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.945506][ T5177] vlan4: left allmulticast mode
[  426.950446][ T5177] vlan4: left promiscuous mode
[  426.956478][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.959092][ T5177] bridge5: port 1(vlan4) entered disabled state
[  426.983527][ T5177] vlan3: left allmulticast mode
[  426.988438][ T5177] vlan3: left promiscuous mode
[  426.993915][ T5177] bridge3: port 1(vlan3) entered disabled state
[  427.008862][ T5177] vlan2: left allmulticast mode
[  427.014101][ T5177] vlan2: left promiscuous mode
[  427.019027][ T5177] bridge1: port 1(vlan2) entered disabled state
[  427.032073][ T5177] hsr_slave_0: left promiscuous mode
[  427.038166][ T5177] hsr_slave_1: left promiscuous mode
[  427.045322][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.053024][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.062245][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.069692][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.080009][ T5177] bridge_slave_1: left allmulticast mode
[  427.085808][ T5177] bridge_slave_1: left promiscuous mode
[  427.099514][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.108027][ T5177] bridge_slave_0: left allmulticast mode
[  427.122866][ T5177] bridge_slave_0: left promiscuous mode
[  427.128601][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.140477][ T5177] hsr_slave_0: left promiscuous mode
[  427.146741][ T5177] hsr_slave_1: left promiscuous mode
[  427.154152][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.161716][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.170383][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.177988][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.189143][ T5177] bridge_slave_1: left allmulticast mode
[  427.195693][ T5177] bridge_slave_1: left promiscuous mode
[  427.201473][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.212296][ T5177] bridge_slave_0: left allmulticast mode
[  427.217973][ T5177] bridge_slave_0: left promiscuous mode
[  427.224073][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.236729][ T5177] vlan4: left allmulticast mode
[  427.241844][ T5177] vlan4: left promiscuous mode
[  427.246740][ T5177] bridge5: port 1(vlan4) entered disabled state
[  427.256547][ T5177] vlan3: left allmulticast mode
[  427.262836][ T5177] vlan3: left promiscuous mode
[  427.267733][ T5177] bridge3: port 1(vlan3) entered disabled state
[  427.278535][ T5177] vlan2: left allmulticast mode
[  427.284980][ T5177] vlan2: left promiscuous mode
[  427.289882][ T5177] bridge1: port 1(vlan2) entered disabled state
[  427.302706][ T5177] hsr_slave_0: left promiscuous mode
[  427.308585][ T5177] hsr_slave_1: left promiscuous mode
[  427.319963][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.327739][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.336641][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.346567][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.355856][ T5177] bridge_slave_1: left allmulticast mode
[  427.362142][ T5177] bridge_slave_1: left promiscuous mode
[  427.368418][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.378945][ T5177] bridge_slave_0: left allmulticast mode
[  427.385364][ T5177] bridge_slave_0: left promiscuous mode
[  427.391111][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.411539][ T5177] veth1_macvtap: left promiscuous mode
[  427.417077][ T5177] veth0_macvtap: left promiscuous mode
[  427.424486][ T5177] veth1_vlan: left promiscuous mode
[  427.436084][ T5177] veth1_macvtap: left promiscuous mode
[  427.442431][ T5177] veth0_macvtap: left promiscuous mode
[  427.448799][ T5177] veth1_vlan: left promiscuous mode
[  427.454476][ T5177] veth0_vlan: left promiscuous mode
[  427.462782][ T5177] veth1_macvtap: left promiscuous mode
[  427.468349][ T5177] veth0_macvtap: left promiscuous mode
[  427.475404][ T5177] veth1_vlan: left promiscuous mode
[  427.901242][ T5177] bond4 (unregistering): Released all slaves
[  427.912046][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.921108][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.924101][ T5177] bond3 (unregistering): Released all slaves
[  427.944829][ T5177] bond2 (unregistering): Released all slaves
[  427.956342][ T5177] bond1 (unregistering): Released all slaves
[  427.992536][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.558431][ T5177] team0 (unregistering): Port device team_slave_1 removed
[  428.577853][ T5177] team0 (unregistering): Port device team_slave_0 removed
[  428.591507][ T5177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.607812][ T5177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.692912][ T5177] bond0 (unregistering): Released all slaves
[  428.710842][ T5114] Bluetooth: hci3: command 0x040f tx timeout
[  428.873982][ T5177] team0 (unregistering): Port device team_slave_1 removed
[  428.890737][ T5177] team0 (unregistering): Port device team_slave_0 removed
[  428.908315][ T5177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.928638][ T5177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.950989][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.024845][ T5177] bond0 (unregistering): Released all slaves
[  429.032121][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.098616][ T5177] bond3 (unregistering): Released all slaves
[  429.114596][ T5177] bond2 (unregistering): Released all slaves
[  429.132511][ T5177] bond1 (unregistering): Released all slaves
[  429.205867][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.636010][ T5177] team0 (unregistering): Port device team_slave_1 removed
[  429.653397][ T5177] team0 (unregistering): Port device team_slave_0 removed
[  429.672296][ T5177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.686365][ T5177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.776665][ T5177] bond0 (unregistering): Released all slaves
[  429.992910][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.077369][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.790727][ T5114] Bluetooth: hci3: command 0x0419 tx timeout
[  432.071017][   T22] net_ratelimit: 3 callbacks suppressed
[  432.071036][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.155131][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.241174][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.113714][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.190960][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.990976][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.151014][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.233307][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.191207][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.270956][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.271101][ T6242] net_ratelimit: 4 callbacks suppressed
[  437.271122][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.351073][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.311522][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.311536][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.401128][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.350945][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.430940][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.070915][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.393086][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.471069][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.471031][ T5160] net_ratelimit: 3 callbacks suppressed
[  442.471049][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.551125][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.110922][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.513801][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.591126][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.391031][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.551040][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.631177][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.792983][ T1214] ieee802154 phy0 wpan0: encryption failed: -22
[  444.799355][ T1214] ieee802154 phy1 wpan1: encryption failed: -22
[  445.591094][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.671134][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.671001][ T6242] net_ratelimit: 4 callbacks suppressed
[  447.671024][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.685350][ T1097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.694780][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.703464][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.750903][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.759573][ T1097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.768917][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.783261][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.796770][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.871053][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.951051][ T6242] net_ratelimit: 9 callbacks suppressed
[  452.951081][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.030939][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.518604][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.001176][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.073761][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.031364][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.110918][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.290784][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.071107][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.160952][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.151086][   T22] net_ratelimit: 3 callbacks suppressed
[  458.151107][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.230820][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.321071][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.191866][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.270894][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.590875][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.231167][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.313740][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.271618][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.353841][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.351128][ T6242] net_ratelimit: 4 callbacks suppressed
[  463.351145][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.449281][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.391122][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.399275][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.470989][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.430956][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.513769][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.670958][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.471160][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.553945][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.560908][ T6242] net_ratelimit: 3 callbacks suppressed
[  468.560924][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.630952][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.735955][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.591051][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.670963][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.470979][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.630952][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.723723][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.671251][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.750988][ T6248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.750955][ T6242] net_ratelimit: 4 callbacks suppressed
[  473.750976][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.839048][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.791076][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.791111][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.871385][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.831136][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.919370][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.551120][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.881188][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.960970][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.950953][ T6242] net_ratelimit: 3 callbacks suppressed
[  478.950973][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.031011][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.590961][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.991585][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.072911][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.873288][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.031022][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.111024][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.073516][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.160746][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.151027][ T5160] net_ratelimit: 4 callbacks suppressed
[  484.151046][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.230971][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.193389][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.270827][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.670915][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.230887][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.320887][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.950886][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.280905][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.350931][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.508588][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  488.516538][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  488.526908][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  488.534486][ T5114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  488.545810][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  489.360898][ T5160] net_ratelimit: 3 callbacks suppressed
[  489.360919][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.432907][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.998490][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.390943][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.470867][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.630728][ T5114] Bluetooth: hci6: command 0x0409 tx timeout
[  491.434724][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.511648][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.751609][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.471087][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.552427][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.710735][ T5114] Bluetooth: hci6: command 0x041b tx timeout
[  494.563884][ T5160] net_ratelimit: 3 callbacks suppressed
[  494.563904][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.634181][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.800791][ T5114] Bluetooth: hci6: command 0x040f tx timeout
[  494.806922][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.601172][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.673726][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.070890][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.646039][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.710767][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.871003][ T5114] Bluetooth: hci6: command 0x0419 tx timeout
[  497.681085][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.760960][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.751054][ T6242] net_ratelimit: 4 callbacks suppressed
[  499.751074][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.830829][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.793564][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.870882][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.870897][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.841113][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.913992][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.161019][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.871753][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.950895][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.950918][   T22] net_ratelimit: 3 callbacks suppressed
[  504.950936][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.042837][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.191180][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.991005][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.070867][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.242665][ T1214] ieee802154 phy0 wpan0: encryption failed: -22
[  506.249025][ T1214] ieee802154 phy1 wpan1: encryption failed: -22
[  506.950810][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.040937][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.110803][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.071145][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.161055][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.320872][ T5114] Bluetooth: hci4: command 0x0406 tx timeout
[  509.991088][  T897] net_ratelimit: 3 callbacks suppressed
[  509.991109][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.150972][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.241452][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.196496][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.270867][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.279017][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.231175][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.311009][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.031894][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.270907][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.350951][ T6242] net_ratelimit: 4 callbacks suppressed
[  515.350967][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.439655][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.081037][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.393544][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.490787][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.351068][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.431052][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.513057][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.470956][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.550819][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.400926][T12026] net_ratelimit: 3 callbacks suppressed
[  520.400944][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.550832][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.631763][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.602194][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.670973][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.151403][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.631908][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.710995][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.430914][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.672689][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.750996][   T22] net_ratelimit: 4 callbacks suppressed
[  525.751016][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.841604][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.471011][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.795267][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.883356][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.831100][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.912878][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.230811][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.877442][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.950880][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.951074][ T6242] net_ratelimit: 3 callbacks suppressed
[  530.951095][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.033099][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.270994][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.991187][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.070827][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.551263][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.033214][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.110975][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.910937][ T5114] Bluetooth: hci1: command 0x0406 tx timeout
[  533.917007][ T5114] Bluetooth: hci2: command 0x0406 tx timeout
[  534.072020][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.150903][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.157647][   T22] net_ratelimit: 4 callbacks suppressed
[  536.157664][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.230822][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.193438][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.284105][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.355968][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.230986][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.310886][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.630854][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.283075][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.350994][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.351037][ T6242] net_ratelimit: 3 callbacks suppressed
[  541.351055][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.441007][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.680873][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.390908][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.480965][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.430976][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.439133][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.511035][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.471482][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.550824][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.471011][  T897] net_ratelimit: 3 callbacks suppressed
[  546.471031][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.552382][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.630934][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.590944][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.670924][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.756955][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.631119][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.710879][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.270773][ T5114] Bluetooth: hci3: command 0x0406 tx timeout
[  549.511037][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.671086][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.687778][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  549.696870][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  549.705284][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  549.714552][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  549.722723][ T5114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  549.729986][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  551.760923][ T5114] Bluetooth: hci6: command 0x0409 tx timeout
[  551.768253][ T6242] net_ratelimit: 4 callbacks suppressed
[  551.768267][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.831825][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.551030][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.802989][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.880743][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.830786][ T5114] Bluetooth: hci6: command 0x041b tx timeout
[  553.831062][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.839383][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.910938][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.882636][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.951655][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.910876][ T5114] Bluetooth: hci6: command 0x040f tx timeout
[  556.870822][T12026] net_ratelimit: 3 callbacks suppressed
[  556.870842][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.951019][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.030825][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.990833][ T5114] Bluetooth: hci6: command 0x0419 tx timeout
[  557.999257][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.071897][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.630982][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.030851][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.121075][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.910880][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.071851][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.161112][ T5160] net_ratelimit: 4 callbacks suppressed
[  562.161132][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.239301][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.960913][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.191099][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.282157][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.236911][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.311015][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.710874][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.270996][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.350910][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.360983][ T6242] net_ratelimit: 6 callbacks suppressed
[  567.360999][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.437864][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.673692][ T1214] ieee802154 phy0 wpan0: encryption failed: -22
[  567.680185][ T1214] ieee802154 phy1 wpan1: encryption failed: -22
[  567.750902][  T897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.392961][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.470866][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.030862][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.430952][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.510992][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.230820][   T28] INFO: task syz-executor.1:14101 blocked for more than 143 seconds.
[  570.239681][   T28]       Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  570.248588][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  570.257371][   T28] task:syz-executor.1  state:D stack:24360 pid:14101 ppid:1      flags:0x00000004
[  570.266875][   T28] Call Trace:
[  570.270208][   T28]  <TASK>
[  570.274391][   T28]  __schedule+0xc91/0x5770
[  570.278935][   T28]  ? mark_lock.part.0+0xee/0x1970
[  570.284260][   T28]  ? io_schedule_timeout+0x150/0x150
[  570.289567][   T28]  ? rwsem_down_write_slowpath+0x3b8/0x1220
[  570.295752][   T28]  schedule+0xde/0x1a0
[  570.299844][   T28]  schedule_preempt_disabled+0x13/0x20
[  570.306822][   T28]  rwsem_down_write_slowpath+0x3e2/0x1220
[  570.313103][   T28]  ? down_timeout+0x90/0x90
[  570.317659][   T28]  ? lock_release+0x670/0x670
[  570.322670][   T28]  down_write+0x1d2/0x200
[  570.327031][   T28]  ? rwsem_down_write_slowpath+0x1220/0x1220
[  570.333354][   T28]  ? spin_bug+0x1c0/0x1c0
[  570.338338][   T28]  register_netdevice_notifier+0x22/0x270
[  570.344839][   T28]  devlink_alloc_ns+0x144/0xac0
[  570.349819][   T28]  ? nsim_bus_remove+0x20/0x20
[  570.354933][   T28]  nsim_drv_probe+0xba/0x13d0
[  570.359682][   T28]  ? up_write+0x1b4/0x520
[  570.364464][   T28]  ? nsim_dev_get_vfs+0xc0/0xc0
[  570.369377][   T28]  ? kernfs_add_one+0x17a/0x4f0
[  570.374637][   T28]  ? kernfs_create_link+0x1b7/0x230
[  570.379873][   T28]  ? kernfs_put+0x35/0x50
[  570.385343][   T28]  ? sysfs_do_create_link_sd+0xbb/0x140
[  570.392043][   T28]  ? sysfs_create_link+0x6b/0xc0
[  570.397035][   T28]  ? nsim_bus_remove+0x20/0x20
[  570.402219][   T28]  really_probe+0x240/0xca0
[  570.406866][   T28]  __driver_probe_device+0x1df/0x4d0
[  570.413731][   T28]  driver_probe_device+0x4c/0x1a0
[  570.418788][   T28]  __device_attach_driver+0x1d4/0x2e0
[  570.424881][   T28]  bus_for_each_drv+0x149/0x1d0
[  570.429784][   T28]  ? driver_probe_device+0x1a0/0x1a0
[  570.435218][   T28]  ? bus_for_each_dev+0x1c0/0x1c0
[  570.441033][   T28]  ? bus_to_subsys+0x105/0x140
[  570.445942][   T28]  ? lock_downgrade+0x690/0x690
[  570.451678][   T28]  __device_attach+0x1e4/0x4b0
[  570.456502][   T28]  ? device_driver_attach+0x210/0x210
[  570.461975][   T28]  ? do_raw_spin_unlock+0x175/0x230
[  570.467206][   T28]  bus_probe_device+0x17c/0x1c0
[  570.472417][   T28]  device_add+0x11c4/0x1c50
[  570.476985][   T28]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[  570.484097][   T28]  ? __init_waitqueue_head+0xca/0x150
[  570.484432][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.489762][   T28]  new_device_store+0x40e/0x690
[  570.503053][   T28]  ? nsim_bus_dev_numvfs_show+0x60/0x60
[  570.508667][   T28]  ? nsim_bus_dev_numvfs_show+0x60/0x60
[  570.514490][   T28]  ? sysfs_file_ops+0x1c0/0x1c0
[  570.519365][   T28]  bus_attr_store+0x76/0xa0
[  570.524198][   T28]  ? bus_attr_show+0x90/0x90
[  570.528818][   T28]  sysfs_kf_write+0x114/0x170
[  570.534552][   T28]  kernfs_fop_write_iter+0x3f1/0x600
[  570.541530][   T28]  vfs_write+0x9ed/0xe10
[  570.545836][   T28]  ? kernel_write+0x670/0x670
[  570.550524][   T28]  ? build_open_flags+0x6f0/0x6f0
[  570.555886][   T28]  ? __fget_light+0x20a/0x270
[  570.561029][ T6242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.561474][   T28]  ksys_write+0x12b/0x250
[  570.573626][   T28]  ? __ia32_sys_read+0xb0/0xb0
[  570.578429][   T28]  ? syscall_enter_from_user_mode+0x26/0xb0
[  570.584571][   T28]  do_syscall_64+0x39/0xb0
[  570.589020][   T28]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  570.595127][   T28] RIP: 0033:0x7fd246a3de7f
[  570.599566][   T28] RSP: 002b:00007ffeda5c4f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  570.608311][   T28] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd246a3de7f
[  570.616688][   T28] RDX: 0000000000000003 RSI: 00007ffeda5c4f50 RDI: 0000000000000005
[  570.624972][   T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffeda5c4ea0
[  570.633584][   T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fd246ae7772
[  570.643185][   T28] R13: 00007ffeda5c4f50 R14: 0000000000000000 R15: 00007ffeda5c5620
[  570.651499][   T28]  </TASK>
[  570.654694][   T28] 
[  570.654694][   T28] Showing all locks held in the system:
[  570.662744][   T28] 1 lock held by rcu_tasks_kthre/12:
[  570.668054][   T28]  #0: ffffffff8c794b70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80
[  570.679353][ T5177] unregister_netdevice: waiting for veth0_to_batadv to become free. Usage count = 2
[  570.686984][   T28] 1 lock held by rcu_tasks_trace/13:
[  570.688959][ T5177] leaked reference.
[  570.694155][   T28]  #0: ffffffff8c794870 (rcu_tasks_trace.tasks_gp_mutex
[  570.698075][ T5177]  ib_device_set_netdev+0x257/0x750
[  570.698163][   T28] ){+.+.}-{3:3}
[  570.698187][ T5177]  siw_newlink+0x507/0x1040
[  570.707688][   T28] , at: rcu_tasks_one_gp+0x31/0xd80
[  570.710394][ T5177]  nldev_newlink+0x332/0x5e0
[  570.713872][   T28] 1 lock held by khungtaskd/28:
[  570.718331][ T5177]  rdma_nl_rcv_msg+0x371/0x6a0
[  570.723543][   T28]  #0: 
[  570.728116][ T5177]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2fc/0x440
[  570.733010][   T28] ffffffff8c7956c0
[  570.737718][ T5177]  netlink_unicast+0x547/0x7f0
[  570.740476][   T28]  (rcu_read_lock
[  570.746895][ T5177]  netlink_sendmsg+0x925/0xe30
[  570.746942][ T5177]  sock_sendmsg+0xde/0x190
[  570.746978][ T5177]  ____sys_sendmsg+0x71c/0x900
[  570.747012][ T5177]  ___sys_sendmsg+0x110/0x1b0
[  570.747054][ T5177]  __sys_sendmsg+0xf7/0x1c0
[  570.747095][ T5177]  do_syscall_64+0x39/0xb0
[  570.747122][ T5177]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  570.748131][ T5177] unregister_netdevice: waiting for bond_slave_1 to become free. Usage count = 2
[  570.774291][   T28] ){....}-{1:2}
[  570.782674][ T5177] leaked reference.
[  570.792786][   T28] , at: debug_show_all_locks+0x55/0x340
[  570.794817][ T5177]  ib_device_set_netdev+0x257/0x750
[  570.804000][   T28] 2 locks held by getty/4760:
[  570.807354][ T5177]  siw_newlink+0x507/0x1040
[  570.811179][   T28]  #0: 
[  570.816681][ T5177]  nldev_newlink+0x332/0x5e0
[  570.821898][   T28] ffff88814ad24098
[  570.826535][ T5177]  rdma_nl_rcv_msg+0x371/0x6a0
[  570.840219][   T28]  (
[  570.842181][ T5177]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2fc/0x440
[  570.842233][ T5177]  netlink_unicast+0x547/0x7f0
[  570.848625][   T28] &tty->ldisc_sem
[  570.849559][ T5177]  netlink_sendmsg+0x925/0xe30
[  570.855996][   T28] ){++++}-{0:0}
[  570.860716][ T5177]  sock_sendmsg+0xde/0x190
[  570.860757][ T5177]  ____sys_sendmsg+0x71c/0x900
[  570.864383][   T28] , at: tty_ldisc_ref_wait+0x26/0x80
[  570.869128][ T5177]  ___sys_sendmsg+0x110/0x1b0
[  570.872622][   T28]  #1: 
[  570.876987][ T5177]  __sys_sendmsg+0xf7/0x1c0
[  570.899293][ T5177]  do_syscall_64+0x39/0xb0
[  570.903724][ T5177]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  570.914621][   T28] ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0
[  570.924605][   T28] 3 locks held by kworker/u4:6/5177:
[  570.929916][   T28] 3 locks held by kworker/u4:9/8278:
[  570.935299][   T28] 6 locks held by syz-executor.1/14101:
[  570.940930][   T28]  #0: ffff88807f0d6460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250
[  570.951537][   T28]  #1: ffff888029610488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600
[  570.961783][   T28]  #2: ffff888147568830 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600
[  570.971973][   T28]  #3: ffffffff8d7e16c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x170/0x690
[  570.982512][   T28]  #4: ffff8880573570e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x4b0
[  570.991930][   T28]  #5: ffffffff8e0e9090 (pernet_ops_rwsem){++++}-{3:3}, at: register_netdevice_notifier+0x22/0x270
[  571.002745][   T28] 1 lock held by syz-executor.1/14123:
[  571.008217][   T28]  #0: ffffffff8e0e9090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0
[  571.018217][   T28] 
[  571.021488][   T28] =============================================
[  571.021488][   T28] 
[  571.029935][   T28] NMI backtrace for cpu 1
[  571.034267][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  571.044095][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  571.054170][   T28] Call Trace:
[  571.057457][   T28]  <TASK>
[  571.060395][   T28]  dump_stack_lvl+0xd9/0x150
[  571.065014][   T28]  nmi_cpu_backtrace+0x29c/0x350
[  571.069964][   T28]  ? lapic_can_unplug_cpu+0xa0/0xa0
[  571.075178][   T28]  nmi_trigger_cpumask_backtrace+0x2a4/0x300
[  571.081203][   T28]  watchdog+0xe16/0x1090
[  571.085552][   T28]  ? proc_dohung_task_timeout_secs+0x80/0x80
[  571.091549][   T28]  kthread+0x2e8/0x3a0
[  571.095677][   T28]  ? kthread_complete_and_exit+0x40/0x40
[  571.101332][   T28]  ret_from_fork+0x1f/0x30
[  571.105780][   T28]  </TASK>
[  571.109570][   T28] Sending NMI from CPU 1 to CPUs 0:
[  571.115046][    C0] NMI backtrace for cpu 0
[  571.115056][    C0] CPU: 0 PID: 4433 Comm: klogd Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  571.115079][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  571.115092][    C0] RIP: 0033:0x7f50391c6678
[  571.115109][    C0] Code: 07 00 00 0f 85 f6 00 00 00 4c 8d 25 32 1e 07 00 48 63 dd ba ff 03 00 00 bf 02 00 00 00 29 ea 4c 01 e3 48 89 de e8 38 08 fc ff <85> c0 79 1d 48 8b 05 25 1c 07 00 83 38 04 74 c2 48 8d 3d 4f 42 06
[  571.115130][    C0] RSP: 002b:00007ffd12dfdd40 EFLAGS: 00000203
[  571.115147][    C0] RAX: 00000000000003ed RBX: 00007f5039238490 RCX: 00007f50390ab8b7
[  571.115162][    C0] RDX: 00000000000003ff RSI: 00007f5039238490 RDI: 0000000000000002
[  571.115176][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000561537e9bd30
[  571.115190][    C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f5039238490
[  571.115204][    C0] R13: 00007f50392384ab R14: 00007f50392384ab R15: 0000000000000000
[  571.115219][    C0] FS:  00007f5038f10800 GS:  0000000000000000
[  571.119189][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  571.225965][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc2-syzkaller-00394-g032a954061af #0
[  571.237522][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[  571.247575][   T28] Call Trace:
[  571.250850][   T28]  <TASK>
[  571.253795][   T28]  dump_stack_lvl+0xd9/0x150
[  571.258405][   T28]  panic+0x688/0x730
[  571.262345][   T28]  ? panic_smp_self_stop+0x90/0x90
[  571.267496][   T28]  ? lapic_can_unplug_cpu+0xa0/0xa0
[  571.272715][   T28]  ? preempt_schedule_thunk+0x1a/0x20
[  571.278111][   T28]  ? watchdog+0xbe8/0x1090
[  571.282541][   T28]  watchdog+0xbf9/0x1090
[  571.286793][   T28]  ? proc_dohung_task_timeout_secs+0x80/0x80
[  571.292778][   T28]  kthread+0x2e8/0x3a0
[  571.296854][   T28]  ? kthread_complete_and_exit+0x40/0x40
[  571.302501][   T28]  ret_from_fork+0x1f/0x30
[  571.306943][   T28]  </TASK>
[  571.310224][   T28] Kernel Offset: disabled
[  571.314577][   T28] Rebooting in 86400 seconds..