fffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00}, 0x38)

[  713.590942][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.598013][T31200] ALSA: seq fatal error: cannot create timer (-22)
[  713.648437][T31186] block nbd5: Could not allocate knbd recv work queue.
[  713.681494][T31186] block nbd5: shutting down sockets
11:26:03 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100))

[  713.728859][T31208] ALSA: seq fatal error: cannot create timer (-22)
11:26:03 executing program 3:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xa, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00}, 0x38)

11:26:03 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf25020000003c0004800500030007000000050003000000000005000300020000000500030005000000050003000100000005000300000000000500030007000000080001000100000008000200010000005c000c8014000b8008000a00b41f000008000a00dfcf000024000b8008000a002dd50000080009001cd9a65108000a005b6d000008000a003b7a00000c000b8008000a00a370000014000b8008000a00ad1100000800090014856e229c0008800c00078008000500f66b9e631400078008000500e4af3e59080006000f0000002400078008000600ff00000008000500c6b24a1e08000500c77b884908000500b893322904b200639ff0e09f04be63957f5904ab004600000008000600ab0000003c0007000008000600f9000000080005001b2a71410800050038808b32080006005a00000008000600da000000200008801c000780080006001b00000008000600f900000008000500c105975844000c802c000b8008000a00038b000008000a0040e70000080009004cabec7608000a0077cf0000080009000366512514000b8008000900"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:03 executing program 1:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xa, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00}, 0x38)

11:26:03 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  713.871031][T31214] ALSA: seq fatal error: cannot create timer (-22)
11:26:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x802, 0x0)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfd6e)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)

11:26:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:04 executing program 3:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xa, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00}, 0x38)

11:26:04 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  714.071278][ T6914] block nbd5: Receive control failed (result -107)
11:26:04 executing program 1:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xa, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00}, 0x38)

[  714.135343][T31213] block nbd5: shutting down sockets
11:26:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:04 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:04 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf25020000003c0004800500030007000000050003000000000005000300020000000500030005000000050003000100000005000300000000000500030007000000080001000100000008000200010000005c000c8014000b8008000a00b41f000008000a00dfcf000024000b8008000a002dd50000080009001cd9a65108000a005b6d000008000a003b7a00000c000b8008000a00a370000014000b8008000a00ad1100000800090014856e229c0008800c00078008000500f66b9e631400078008000500e4af3e59080006000f0000002400078008000600ff00000008000500c6b24a1e08000500c77b884908000500b893322904b200639ff0e09f04be63957f5904ab004600000008000600ab0000003c0007000008000600f9000000080005001b2a71410800050038808b32080006005a00000008000600da000000200008801c000780080006001b00000008000600f900000008000500c105975844000c802c000b8008000a00038b000008000a0040e70000080009004cabec7608000a0077cf0000080009000366512514000b8008000900"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  714.360088][ T6914] block nbd2: Receive control failed (result -107)
[  714.436349][T31236] block nbd2: shutting down sockets
11:26:04 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:04 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:26:04 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf25020000003c0004800500030007000000050003000000000005000300020000000500030005000000050003000100000005000300000000000500030007000000080001000100000008000200010000005c000c8014000b8008000a00b41f000008000a00dfcf000024000b8008000a002dd50000080009001cd9a65108000a005b6d000008000a003b7a00000c000b8008000a00a370000014000b8008000a00ad1100000800090014856e229c0008800c00078008000500f66b9e631400078008000500e4af3e59080006000f0000002400078008000600ff00000008000500c6b24a1e08000500c77b884908000500b893322904b200639ff0e09f04be63957f5904ab004600000008000600ab0000003c0007000008000600f9000000080005001b2a71410800050038808b32080006005a00000008000600da000000200008801c000780080006001b00000008000600f900000008000500c105975844000c802c000b8008000a00038b000008000a0040e70000080009004cabec7608000a0077cf0000080009000366512514000b8008000900"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  714.589249][ T6914] block nbd5: Receive control failed (result -107)
[  714.652419][T31249] block nbd5: shutting down sockets
[  714.657978][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:04 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf25020000003c0004800500030007000000050003000000000005000300020000000500030005000000050003000100000005000300000000000500030007000000080001000100000008000200010000005c000c8014000b8008000a00b41f000008000a00dfcf000024000b8008000a002dd50000080009001cd9a65108000a005b6d000008000a003b7a00000c000b8008000a00a370000014000b8008000a00ad1100000800090014856e229c0008800c00078008000500f66b9e631400078008000500e4af3e59080006000f0000002400078008000600ff00000008000500c6b24a1e08000500c77b884908000500b893322904b200639ff0e09f04be63957f5904ab004600000008000600ab0000003c0007000008000600f9000000080005001b2a71410800050038808b32080006005a00000008000600da000000200008801c000780080006001b00000008000600f900000008000500c105975844000c802c000b8008000a00038b000008000a0040e70000080009004cabec7608000a0077cf0000080009000366512514000b8008000900"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  714.824871][T31268] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  714.863677][T31268] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
11:26:04 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000400)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8baa7a", 0x0, 0x88, 0x0, @loopback, @mcast1, [], "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"}}}}}}, 0xfca)

11:26:05 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf25020000003c0004800500030007000000050003000000000005000300020000000500030005000000050003000100000005000300000000000500030007000000080001000100000008000200010000005c000c8014000b8008000a00b41f000008000a00dfcf000024000b8008000a002dd50000080009001cd9a65108000a005b6d000008000a003b7a00000c000b8008000a00a370000014000b8008000a00ad1100000800090014856e229c0008800c00078008000500f66b9e631400078008000500e4af3e59080006000f0000002400078008000600ff00000008000500c6b24a1e08000500c77b884908000500b893322904b200639ff0e09f04be63957f5904ab004600000008000600ab0000003c0007000008000600f9000000080005001b2a71410800050038808b32080006005a00000008000600da000000200008801c000780080006001b00000008000600f900000008000500c105975844000c802c000b8008000a00038b000008000a0040e70000080009004cabec7608000a0077cf0000080009000366512514000b8008000900"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

11:26:05 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[  715.019901][ T6914] block nbd3: Receive control failed (result -107)
[  715.115241][T31261] block nbd3: shutting down sockets
[  715.143169][ T6914] block nbd5: Receive control failed (result -107)
11:26:05 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  715.533948][ T6914] block nbd4: Receive control failed (result -107)
[  715.571302][T31273] block nbd5: shutting down sockets
[  715.591848][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.593221][T31296] block nbd4: shutting down sockets
[  715.700439][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:05 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
exit(0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

11:26:05 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  715.812406][ T6914] block nbd3: Receive control failed (result -107)
[  716.107308][T31302] block nbd3: shutting down sockets
[  716.253773][ T6914] block nbd4: Receive control failed (result -107)
11:26:06 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
exit(0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

[  716.456734][T31314] block nbd4: shutting down sockets
[  716.525641][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:06 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4021)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc017c3a", @ANYRES16, @ANYBLOB="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"/430], 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0xc005)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
dup3(r2, r0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  716.570085][T31306] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  716.590766][T31306] device ip6gretap0 entered promiscuous mode
[  716.637674][T31306] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  716.712302][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.954245][ T6914] block nbd3: Receive control failed (result -107)
11:26:07 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:26:07 executing program 4:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:07 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000400)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8baa7a", 0x0, 0x88, 0x0, @loopback, @mcast1, [], "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"}}}}}}, 0xfca)

11:26:07 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
exit(0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

[  717.010196][T31348] block nbd3: shutting down sockets
[  717.097330][T31358] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  717.107433][T31358] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
11:26:07 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:26:07 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

11:26:07 executing program 5:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
exit(0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

11:26:07 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  717.833406][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:08 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[  718.509602][T31372] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
11:26:08 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[  718.634921][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.792981][T11995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.893318][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.911070][T31383] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  718.932301][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.941698][T31372] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
[  718.941838][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.963558][T31383] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
11:26:09 executing program 4:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:09 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000400)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8baa7a", 0x0, 0x88, 0x0, @loopback, @mcast1, [], "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"}}}}}}, 0xfca)

11:26:09 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

11:26:09 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:26:09 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:26:09 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

[  720.217294][T31424] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
[  720.254199][T31425] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
11:26:10 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x402000)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ftruncate(r1, 0x2008001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

11:26:10 executing program 0:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:10 executing program 4:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:10 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000400)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8baa7a", 0x0, 0x88, 0x0, @loopback, @mcast1, [], "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"}}}}}}, 0xfca)

[  720.950883][T13373] net_ratelimit: 1 callbacks suppressed
[  720.950895][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:11 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:26:11 executing program 1:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:11 executing program 5:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

[  721.730569][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.995967][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.197576][T31464] __nla_validate_parse: 2 callbacks suppressed
[  722.197590][T31464] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
11:26:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)

11:26:12 executing program 0:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

[  722.528494][T31464] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
11:26:12 executing program 5:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:12 executing program 3:
syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000401090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100))

11:26:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)

11:26:12 executing program 3:
syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000401090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100))

[  723.032167][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:13 executing program 1:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:13 executing program 3:
syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000401090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100))

11:26:13 executing program 4:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:13 executing program 3:
syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000401090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100))

11:26:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)

[  724.071428][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:14 executing program 5:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:14 executing program 0:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

[  724.791688][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)

[  725.111839][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:16 executing program 1:
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, 0x10000}, {0x0, 0x270, 0x19, 0xc6d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@local}, 0x0, @in=@loopback, 0x3502, 0x0, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8)
r0 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
finit_module(r1, &(0x7f0000000040)='{/-#(+@#\'\'@/^*{)}\x00', 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket(0x1e, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x294eb8984527e75c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='virt_wifi0\x00', 0x5, 0xff, 0x19c})

11:26:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

[  726.151719][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:17 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

11:26:17 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

[  727.193965][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:17 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

11:26:17 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

11:26:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:17 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

11:26:17 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

[  727.838063][T15293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:18 executing program 1:
r0 = getuid()
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0])
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x874028, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x31]}}]})

11:26:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

[  728.231342][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  728.392725][T15293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.467443][T31651] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  728.542934][T31680] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  728.578510][T31680] bond4: (slave ip6tnl1): Error -95 calling set_mac_address
11:26:18 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

11:26:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

[  728.997245][T31680] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  729.051220][T31680] bond5 (uninitialized): Released all slaves
11:26:19 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

[  729.270780][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:19 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

[  729.429365][T31709] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  729.536232][T31721] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  729.604162][T31721] bond5: (slave ip6tnl1): Error -95 calling set_mac_address
11:26:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40010)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
fallocate(r1, 0x0, 0x0, 0x10000101)

11:26:19 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

11:26:20 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:20 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  730.247377][T31763] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  730.301346][T31765] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  730.320766][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  730.417995][T31782] bond9: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  730.467849][T31782] bond9: (slave ip6tnl2): Error -95 calling set_mac_address
[  730.688755][T31781] bond6: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  730.723272][T31781] bond6: (slave ip6tnl1): Error -95 calling set_mac_address
11:26:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  730.866725][T31840] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  730.895630][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.942998][T31841] bond11: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  730.981186][T31841] bond11: (slave ip6tnl1): Error -95 calling set_mac_address
11:26:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:21 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  731.223986][T31888] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
11:26:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c0003800800010080ffffff08000200070000000800010000040000080003003d00000088000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d010000080002000600ffffffffffffffe70000000000000000e413d27ba2f07b490bbdff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453b33b04730d32ab8f80cdca97d66f1dec5298bc27f6a2a6aac8a3107c53dee0195c63d08d9b15235b0c566ff71bc8cab337d5549ade3dea4902b82000000000700792714515c47525ddc65dca090651b20fedc5636ab94e529657f83d34c77e4086034107a980108cde269324d6116b00974c4606f72e3a38cddd1d6279a2b26dfdd627bf2b415316cfff400f509960a0371cb28915120d50c21d0bf7bb30bfbf68b0d51f0fa546fed70c3f0015cc0461e151fa80d4a3ef3347a6f00b5f56c535eadde22bf5df8b03975cede900538895718ebd3fda509c4e78c54760b07fca5eadc5c4c474ce4553aacdac"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  731.317385][T31890] bond13: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  731.350773][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.389873][T31890] bond13: (slave ip6tnl2): Error -95 calling set_mac_address
11:26:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  731.540884][T31930] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  731.680369][T31936] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  731.790336][T31938] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  731.854612][T31939] bond10: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  731.915975][T31939] bond10: (slave ip6tnl2): Error -95 calling set_mac_address
[  732.118481][T31940] bond10: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  732.139997][T31940] bond10: (slave ip6tnl2): Error -95 calling set_mac_address
[  732.290036][T31943] bond8: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  732.303921][T31943] bond8: (slave ip6tnl2): Error -95 calling set_mac_address
[  732.390829][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  732.485045][T32040] bond12: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  732.523436][T32040] bond12: (slave ip6tnl1): Error -95 calling set_mac_address
11:26:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c0003800800010080ffffff08000200070000000800010000040000080003003d00000088000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d010000080002000600ffffffffffffffe70000000000000000e413d27ba2f07b490bbdff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453b33b04730d32ab8f80cdca97d66f1dec5298bc27f6a2a6aac8a3107c53dee0195c63d08d9b15235b0c566ff71bc8cab337d5549ade3dea4902b82000000000700792714515c47525ddc65dca090651b20fedc5636ab94e529657f83d34c77e4086034107a980108cde269324d6116b00974c4606f72e3a38cddd1d6279a2b26dfdd627bf2b415316cfff400f509960a0371cb28915120d50c21d0bf7bb30bfbf68b0d51f0fa546fed70c3f0015cc0461e151fa80d4a3ef3347a6f00b5f56c535eadde22bf5df8b03975cede900538895718ebd3fda509c4e78c54760b07fca5eadc5c4c474ce4553aacdac"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:22 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

11:26:22 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c0003800800010080ffffff08000200070000000800010000040000080003003d00000088000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d010000080002000600ffffffffffffffe70000000000000000e413d27ba2f07b490bbdff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453b33b04730d32ab8f80cdca97d66f1dec5298bc27f6a2a6aac8a3107c53dee0195c63d08d9b15235b0c566ff71bc8cab337d5549ade3dea4902b82000000000700792714515c47525ddc65dca090651b20fedc5636ab94e529657f83d34c77e4086034107a980108cde269324d6116b00974c4606f72e3a38cddd1d6279a2b26dfdd627bf2b415316cfff400f509960a0371cb28915120d50c21d0bf7bb30bfbf68b0d51f0fa546fed70c3f0015cc0461e151fa80d4a3ef3347a6f00b5f56c535eadde22bf5df8b03975cede900538895718ebd3fda509c4e78c54760b07fca5eadc5c4c474ce4553aacdac"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

[  733.016105][T32163] bond9: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  733.054090][T32163] bond9: (slave ip6tnl2): Error -95 calling set_mac_address
11:26:23 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

[  733.433637][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.472722][T32185] bond11: (slave ip6tnl2): The slave device specified does not support setting the MAC address
11:26:23 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x201, 0x0, 0x0)
creat(0x0, 0x0)

[  733.547055][T32185] bond11: (slave ip6tnl2): Error -95 calling set_mac_address
[  733.895844][T32202] validate_nla: 6 callbacks suppressed
[  733.895857][T32202] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  733.920019][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.934289][T32205] bond13: (slave ip6tnl1): The slave device specified does not support setting the MAC address
11:26:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0)

[  733.947047][T32205] bond13: (slave ip6tnl1): Error -95 calling set_mac_address
11:26:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0)

11:26:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0)

11:26:24 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0)

[  734.263453][T32208] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
11:26:24 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20)

11:26:24 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:24 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

11:26:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "682a8b62f2fb6fd852dee61c79"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "145eb07cd1d9ccf1"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0)

11:26:24 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

11:26:24 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="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", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

[  734.473846][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.527701][T32326] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  734.580823][T32331] BPF:[1] ENUM (anon) 
[  734.601618][T32348] bond10: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  734.629875][T32331] BPF:size=3 vlen=0
[  734.667217][T32331] BPF: 
[  734.684389][T32331] BPF:Unexpected size
[  734.715347][T32331] BPF:
[  734.715347][T32331] 
[  734.727961][T32348] bond10: (slave ip6tnl2): Error -95 calling set_mac_address
[  734.741014][   T28] audit: type=1804 audit(1598354784.779:286): pid=32370 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/800/file1/file0" dev="loop1" ino=45 res=1 errno=0
11:26:24 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20)

11:26:24 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

11:26:24 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="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", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

11:26:24 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

[  734.950736][   T28] audit: type=1804 audit(1598354784.779:287): pid=32370 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/800/file1/file0" dev="loop1" ino=45 res=1 errno=0
[  734.979054][T32383] BPF:[1] ENUM (anon) 
[  735.000640][T32383] BPF:size=3 vlen=0
[  735.004565][T32383] BPF: 
[  735.007372][T32383] BPF:Unexpected size
[  735.037174][T32383] BPF:
[  735.037174][T32383] 
11:26:25 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20)

11:26:25 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

[  735.135100][   T28] audit: type=1804 audit(1598354784.829:288): pid=32358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/800/file1/file0" dev="loop1" ino=45 res=1 errno=0
[  735.246648][T32398] BPF:[1] ENUM (anon) 
[  735.261167][T32373] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  735.269191][T32398] BPF:size=3 vlen=0
[  735.285368][T32398] BPF: 
11:26:25 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

[  735.296180][T32398] BPF:Unexpected size
[  735.329763][T32398] BPF:
[  735.329763][T32398] 
[  735.444360][   T28] audit: type=1804 audit(1598354785.359:289): pid=32391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/801/file1/file0" dev="loop1" ino=46 res=1 errno=0
[  735.510927][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:25 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20)

11:26:25 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

11:26:25 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="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", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

[  735.664464][   T28] audit: type=1804 audit(1598354785.379:290): pid=32391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/801/file1/file0" dev="loop1" ino=46 res=1 errno=0
11:26:25 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

11:26:25 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

11:26:25 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

[  735.753333][T32415] BPF:[1] ENUM (anon) 
[  735.758500][T32415] BPF:size=3 vlen=0
[  735.762997][T32415] BPF: 
[  735.768032][T32415] BPF:Unexpected size
[  735.773054][T32415] BPF:
[  735.773054][T32415] 
11:26:26 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="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", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

[  736.157496][   T28] audit: type=1804 audit(1598354786.179:291): pid=32421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir349325598/syzkaller.FXK059/793/file1/file0" dev="loop4" ino=47 res=1 errno=0
[  736.186111][   T28] audit: type=1804 audit(1598354786.219:292): pid=32421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir349325598/syzkaller.FXK059/793/file1/file0" dev="loop4" ino=47 res=1 errno=0
11:26:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

11:26:26 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

11:26:26 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

11:26:26 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

[  736.564652][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:26 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

[  736.855734][   T28] audit: type=1804 audit(1598354786.889:293): pid=32442 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/802/file1/file0" dev="sda1" ino=16383 res=1 errno=0
[  736.955429][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:27 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x1af)
request_key(0x0, 0x0, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)

11:26:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r0, r1)

[  737.050145][   T28] audit: type=1804 audit(1598354787.079:294): pid=32448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/802/file1/file0" dev="sda1" ino=16383 res=1 errno=0
11:26:27 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="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", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

11:26:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

[  737.276843][   T28] audit: type=1804 audit(1598354787.109:295): pid=32442 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/802/file1/file0" dev="sda1" ino=16383 res=1 errno=0
11:26:27 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

11:26:27 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  737.594399][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:27 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9d", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

11:26:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

11:26:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

11:26:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1e, &(0x7f0000000180)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b6"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

[  737.994910][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:28 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

11:26:28 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

11:26:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1e, &(0x7f0000000180)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b6"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

11:26:28 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x7c774aac)
creat(0x0, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x8, "7c5e78d2f6028ada64030bded1"}, 0xf, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000400)="466026b21ad0c92c461e93f9fa0ccf23beb8b05f5977c826ce23c3a2de547024270aff9a52a7276913fea6205eb494236ea9eb7b5697196cacfc1e1d25b1", 0x3e, 0x0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
dup(0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9d", 0x225)
sendfile(r1, r2, 0x0, 0x1c500)

[  738.630948][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:28 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

11:26:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1e, &(0x7f0000000180)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b6"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

11:26:29 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

11:26:29 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x3, r1, 0x0, 0x0, 'syz0\x00', 0x0})

11:26:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1e, &(0x7f0000000180)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b6"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = getpid()
tkill(r3, 0x2f)

11:26:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:29 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open(&(0x7f0000001380)='./file0\x00', 0x1ada42, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

11:26:29 executing program 0:
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

11:26:29 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

[  739.670930][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:29 executing program 0:
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

11:26:29 executing program 0:
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

[  739.847216][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  739.847232][   T28] audit: type=1800 audit(1598354789.879:310): pid=32544 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=53 res=0 errno=0
[  739.994825][T15293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:30 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

11:26:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:30 executing program 0:
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

11:26:30 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

11:26:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:30 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

[  740.711700][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:30 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

11:26:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:31 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

11:26:31 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0xd99df2b0075cc66e, 0x800}, 0x20)

11:26:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

[  741.751908][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:31 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

11:26:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:32 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

11:26:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2)
r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xdd\xd9\xc9\xb9Xw\x02i\xd7\xdc6GW\x9b\xcd\xfcGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5)
ftruncate(r0, 0x1000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101202, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdef)

11:26:32 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

11:26:32 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

11:26:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:32 executing program 2:
syz_emit_ethernet(0x76, &(0x7f0000000480)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @mcast1, @mcast2, [@fragment, @routing={0x32}]}}}}}}}, 0x0)

[  742.791830][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:32 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

11:26:32 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

[  743.031574][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:33 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x9, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x1, 0x1}, 0x40)

11:26:33 executing program 2:
syz_emit_ethernet(0x76, &(0x7f0000000480)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @mcast1, @mcast2, [@fragment, @routing={0x32}]}}}}}}}, 0x0)

11:26:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:33 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x3, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev}]}}]}, 0x3c}}, 0x0)

11:26:33 executing program 2:
syz_emit_ethernet(0x76, &(0x7f0000000480)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @mcast1, @mcast2, [@fragment, @routing={0x32}]}}}}}}}, 0x0)

11:26:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

[  743.576616][T32641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:33 executing program 2:
syz_emit_ethernet(0x76, &(0x7f0000000480)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @mcast1, @mcast2, [@fragment, @routing={0x32}]}}}}}}}, 0x0)

11:26:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

[  743.693272][T32653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

[  743.774800][T32649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  743.805028][T32649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

[  743.832300][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x3, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev}]}}]}, 0x3c}}, 0x0)

11:26:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

11:26:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

[  744.080884][T32670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  744.148444][T32670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

11:26:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x3, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev}]}}]}, 0x3c}}, 0x0)

11:26:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

11:26:34 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:34 executing program 5:
open_tree(0xffffffffffffffff, 0x0, 0x8000)

[  744.421293][T32688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009)

[  744.557526][T32700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:34 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)

11:26:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x7ffff00f)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40025)

11:26:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x3, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev}]}}]}, 0x3c}}, 0x0)

11:26:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r3, 0x41ee0095aca7aabf, 0x0, 0x0, {0x33}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}}, 0x0)

11:26:34 executing program 5:
open_tree(0xffffffffffffffff, 0x0, 0x8000)

[  744.820723][T32717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:34 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

11:26:34 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)

[  744.870846][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:34 executing program 5:
open_tree(0xffffffffffffffff, 0x0, 0x8000)

[  744.951393][T32724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
11:26:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r3, 0x41ee0095aca7aabf, 0x0, 0x0, {0x33}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}}, 0x0)

11:26:35 executing program 4:
setpriority(0x0, 0xffffffffffffffff, 0x0)

11:26:35 executing program 3:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:35 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)

11:26:35 executing program 5:
open_tree(0xffffffffffffffff, 0x0, 0x8000)

11:26:35 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

11:26:35 executing program 4:
setpriority(0x0, 0xffffffffffffffff, 0x0)

11:26:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r3, 0x41ee0095aca7aabf, 0x0, 0x0, {0x33}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}}, 0x0)

11:26:35 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)

11:26:35 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

11:26:35 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

11:26:35 executing program 4:
setpriority(0x0, 0xffffffffffffffff, 0x0)

11:26:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r3, 0x41ee0095aca7aabf, 0x0, 0x0, {0x33}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}}, 0x0)

[  745.634567][T32759] cannot load conntrack support for proto=3
11:26:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:35 executing program 3:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:35 executing program 4:
setpriority(0x0, 0xffffffffffffffff, 0x0)

11:26:35 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

11:26:35 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

11:26:36 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

[  745.912610][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:36 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:36 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

11:26:36 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:36 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

11:26:36 executing program 5:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

11:26:36 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

[  746.013608][  T307] cannot load conntrack support for proto=3
[  746.072347][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.198687][  T313] cannot load conntrack support for proto=3
[  746.333243][  T318] cannot load conntrack support for proto=3
[  746.426836][  T323] cannot load conntrack support for proto=3
[  746.576572][  T325] cannot load conntrack support for proto=3
11:26:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:36 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:36 executing program 0:
openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)

11:26:36 executing program 5:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:36 executing program 3:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[  746.846706][  T335] cannot load conntrack support for proto=3
[  746.956070][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:37 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:37 executing program 5:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:37 executing program 3:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:37 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[  747.590758][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:37 executing program 5:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xa0, 0x0, 0xfffffffe, 0x4, 0x0, {0x0, 0xff010000}, {}, {}, {}, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb})
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf}, 0x1c}}, 0x0)

11:26:37 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[  747.990916][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.155551][  T372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[  748.247112][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:38 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  748.764335][  T372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.773597][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[  748.989829][  T384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  749.094235][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.110706][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:26:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x5c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:26:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
getpeername$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
listen(r0, 0x10001)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0), 0x8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:26:40 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:40 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x28, 0x1, 0x0, &(0x7f00000000c0))

11:26:40 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x28, 0x1, 0x0, &(0x7f00000000c0))

11:26:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:40 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x28, 0x1, 0x0, &(0x7f00000000c0))

11:26:40 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:40 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:40 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:40 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x28, 0x1, 0x0, &(0x7f00000000c0))

11:26:40 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:41 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:41 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:41 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:42 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

[  752.151201][T12448] net_ratelimit: 12 callbacks suppressed
[  752.151212][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

[  752.310931][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:42 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:42 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:43 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

[  753.354006][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:43 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'memory'}]}, 0x1c)
write$cgroup_int(r3, &(0x7f0000000200), 0x4001c)

11:26:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:44 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

[  754.391109][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
close(r0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000001)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0x65, 0x76, 0x0, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x64db, 0x401}, 0x0, 0x3c, 0x6, 0x9, 0xfffffffffffffffa, 0x0, 0x1f}, r2, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x57, 0x8d, &(0x7f0000000240)="05aa1af8d115cf2dcef03be91ecd2cbaacaf067b49723fd7effbc680717a12bc81e370429c121115b6ac6d3472ad79b0956c3023d632cc2abaaa188f73d85355528e5642567635df23a377505c5486d600ca034ddac195", &(0x7f0000000380)=""/141, 0xffff, 0x0, 0x59, 0xb9, &(0x7f00000002c0)="4d6fd1cdc3f346240b85041bbc3fa387615225e7e89f75df1f6c5392b6cb60ad31a5d8f259988aeff50e748d5c277fca31e6743052c8b9dd986618c3b35e542072ecea2dc8c36746f76ed4ec97c9c224ff238eec8911160a07", &(0x7f0000000440)="025d9704a4ed718aa048259083633160b9ca4c642c67b3954d56e49fe843114f69321ae9c3a7a3bbcc73afeec2d45273e9283670868562b8f81ceb4394511cfbaf74d56aa7b4ccff905d5544d6485c516ee573d1acd2a5ea0aefa75b578d1d4bf378be0f8f3c744040fe8f7cf7a3908cd8720a77984ecd9bf920304390efe16d9574a466025ba825cb8f70786789555bca650f3a978af00b3bc819bc4860d483ca911f26766ee368bc7b01b6f19c7a24804202234c51706122"}, 0x40)
sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000001)

11:26:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

11:26:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

11:26:45 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

[  755.200748][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:45 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

[  755.431093][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x6ad4, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))

11:26:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4, "4633eccc"}, &(0x7f0000000000)=0x2c)

11:26:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0)

11:26:45 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

11:26:45 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

11:26:45 executing program 3:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4, "4633eccc"}, &(0x7f0000000000)=0x2c)

11:26:46 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:46 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2})

11:26:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0)

11:26:46 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4, "4633eccc"}, &(0x7f0000000000)=0x2c)

[  756.164005][  T568] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
11:26:46 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

11:26:46 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4, "4633eccc"}, &(0x7f0000000000)=0x2c)

11:26:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0)

[  756.403262][  T580] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  756.472243][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:47 executing program 3:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:47 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000008c0)='n5', 0x2}], 0x1}}, {{&(0x7f0000000240), 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0)

11:26:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:47 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:47 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

11:26:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c, 0xf0}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0)

11:26:47 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

[  757.031977][  T605] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  757.032066][  T604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

11:26:47 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:47 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

11:26:47 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000008c0)='n5', 0x2}], 0x1}}, {{&(0x7f0000000240), 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0)

11:26:47 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

[  757.190938][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.258458][  T619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.288379][  T621] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  757.514986][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:47 executing program 3:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:47 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:47 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:47 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000008c0)='n5', 0x2}], 0x1}}, {{&(0x7f0000000240), 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0)

11:26:47 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:47 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:48 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:48 executing program 5:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:48 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:48 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

[  757.940374][  T643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:48 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000008c0)='n5', 0x2}], 0x1}}, {{&(0x7f0000000240), 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0)

11:26:48 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

[  758.230840][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.249675][  T664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.560637][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:48 executing program 3:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:48 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100))
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0xb8)
ptrace$pokeuser(0x6, r0, 0x388, 0x0)

11:26:48 executing program 1:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:48 executing program 0:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:48 executing program 4:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:48 executing program 5:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:48 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

[  758.978422][  T688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.990951][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.062324][  T688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:49 executing program 4:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:49 executing program 5:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:49 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

11:26:49 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

11:26:49 executing program 1:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:49 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

11:26:49 executing program 0:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:50 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:50 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

11:26:50 executing program 4:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:50 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:50 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

11:26:50 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:50 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

11:26:50 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:50 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:50 executing program 1:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:50 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

11:26:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:50 executing program 0:
socket(0x10, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0)

11:26:51 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:51 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:51 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

11:26:51 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0xffd7)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

11:26:51 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

11:26:51 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:51 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

11:26:51 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:51 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:51 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:52 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:52 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

11:26:52 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:52 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:52 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:52 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:52 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

11:26:52 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x7e, 0x401, 0x1}, 0x40)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

11:26:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:52 executing program 5:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:52 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8f, &(0x7f0000000080), &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

[  762.711685][T13373] net_ratelimit: 395 callbacks suppressed
[  762.711705][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:53 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0)

11:26:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x7f, 0x14, 0x30313050})

11:26:53 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:53 executing program 4:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:53 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0)

11:26:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x7f, 0x14, 0x30313050})

11:26:53 executing program 5:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x7f, 0x14, 0x30313050})

[  763.751097][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:53 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0)

11:26:54 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0)

11:26:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000100)={0x0, 0x7f, 0x14, 0x30313050})

[  764.322624][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:54 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:54 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:54 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:54 executing program 4:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

11:26:54 executing program 5:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x2, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x9200000000000000, 0x4, 0x37, 0x16, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  764.790823][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:55 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:55 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:55 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

[  765.670646][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

[  765.834899][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:56 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:56 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000040)='wlan0\x00')

11:26:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

[  766.801865][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:56 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

[  766.870991][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:56 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

[  767.350936][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:57 executing program 1:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:57 executing program 1:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:57 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_gettime(0x2, &(0x7f0000000080)={0x0, <r0=>0x0})
clock_nanosleep(0x2, 0xf418222b87, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0)

11:26:57 executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

[  767.912483][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.922917][  T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.932851][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.950705][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:58 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 1:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:26:58 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:26:58 executing program 0:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

[  768.790603][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.799150][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.807601][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.815998][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.824409][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:58 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

[  768.833252][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:26:58 executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:58 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:26:59 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002800)=0x1, 0x4)
listen(r2, 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe)
recvmmsg(r3, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400})
recvmsg$can_raw(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0)

11:26:59 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:26:59 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:26:59 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:26:59 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:26:59 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x40, 0xab, 0xa37, 0x1, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000040000002800000850000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000280)='GPL\x00', 0x1, 0x217, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10c}, 0x48)

11:26:59 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:26:59 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:26:59 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:00 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:27:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:00 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:00 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:27:00 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:01 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:01 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:27:01 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:27:01 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:01 executing program 5:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:27:01 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002)

11:27:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:27:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:27:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:27:03 executing program 4:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

11:27:03 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

11:27:03 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

[  773.191369][T28379] net_ratelimit: 54 callbacks suppressed
[  773.191380][T28379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.207897][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.216944][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.227889][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:27:03 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:03 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$packet(0x11, 0x0, 0x300)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

11:27:03 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

11:27:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r2, 0x0)

11:27:03 executing program 4:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

[  773.430912][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:03 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:03 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:03 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

11:27:03 executing program 4:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

11:27:03 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:03 executing program 4:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

[  773.935318][ T1156] IPVS: ftp: loaded support on port[0] = 21
11:27:04 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

[  774.310890][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:04 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  774.389082][T11995] tipc: TX() has been purged, node left!
[  774.683106][ T1221] IPVS: ftp: loaded support on port[0] = 21
11:27:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:04 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

11:27:04 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:04 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$packet(0x11, 0x0, 0x300)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

11:27:04 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

[  774.888935][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.909138][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.926034][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.936258][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:05 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:05 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:05 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:05 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

[  775.375135][ T1265] IPVS: ftp: loaded support on port[0] = 21
11:27:05 executing program 4:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  775.666102][ T1269] IPVS: ftp: loaded support on port[0] = 21
11:27:05 executing program 2:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:05 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380), 0xdc)

11:27:05 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$packet(0x11, 0x0, 0x300)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

11:27:05 executing program 2:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:06 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  776.072385][ T1304] IPVS: ftp: loaded support on port[0] = 21
11:27:06 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  776.696232][ T1311] IPVS: ftp: loaded support on port[0] = 21
[  776.738775][ T1345] IPVS: ftp: loaded support on port[0] = 21
11:27:07 executing program 4:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:07 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$packet(0x11, 0x0, 0x300)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

[  777.592989][ T1384] IPVS: ftp: loaded support on port[0] = 21
[  778.470746][T13363] net_ratelimit: 22 callbacks suppressed
[  778.470757][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.951373][  T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.964306][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.977235][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.515874][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.862981][T11995] tipc: TX() has been purged, node left!
[  779.878382][T11995] tipc: TX() has been purged, node left!
11:27:10 executing program 3:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 0:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 5:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 4:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 2:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  780.070776][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:10 executing program 5:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  780.136753][ T1430] IPVS: ftp: loaded support on port[0] = 21
[  780.253827][ T1436] IPVS: ftp: loaded support on port[0] = 21
11:27:10 executing program 3:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

11:27:10 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:10 executing program 3:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

[  780.632268][ T1435] IPVS: ftp: loaded support on port[0] = 21
[  780.661334][ T1456] IPVS: ftp: loaded support on port[0] = 21
11:27:10 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

11:27:11 executing program 3:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r1}, &(0x7f0000000140)=""/239, 0x13c, &(0x7f0000000000)={&(0x7f00000002c0)={'sha512-avx\x00'}})

[  781.111133][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.150745][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.550829][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.190768][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.072481][T11992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.084544][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.095640][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:15 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

11:27:15 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@logbufs={'logbufs', 0x3d, 0x2}}]})

11:27:15 executing program 0:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000580)='ip6_vti0\x00')

11:27:15 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

[  785.190668][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:15 executing program 5:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000580)='ip6_vti0\x00')

11:27:15 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x1}, 0x20)

[  785.299007][ T1566] XFS (loop3): Invalid superblock magic number
[  785.508818][ T1572] IPVS: ftp: loaded support on port[0] = 21
11:27:15 executing program 1:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

11:27:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000580)='ip6_vti0\x00')

[  785.593470][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:15 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:15 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@logbufs={'logbufs', 0x3d, 0x2}}]})

11:27:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000580)='ip6_vti0\x00')

11:27:15 executing program 1:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

[  785.934673][ T1589] IPVS: ftp: loaded support on port[0] = 21
[  785.993126][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:16 executing program 0:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:27:16 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:16 executing program 4:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

[  786.230841][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.241843][ T1619] XFS (loop3): Invalid superblock magic number
[  786.250988][T11995] tipc: TX() has been purged, node left!
[  786.701717][ T1652] IPVS: ftp: loaded support on port[0] = 21
[  787.270733][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.310726][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:18 executing program 4:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

11:27:18 executing program 1:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

11:27:18 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@logbufs={'logbufs', 0x3d, 0x2}}]})

11:27:18 executing program 2:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:18 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:18 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:18 executing program 4:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

[  788.632103][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:18 executing program 1:
socket$inet(0x10, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x28})
read$dsp(r0, 0x0, 0x0)

[  788.708274][ T1731] XFS (loop3): Invalid superblock magic number
11:27:18 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x120, 0x6, {0x0, 0x0, 0xfd, 0x0, 0x0, "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", 0x0, "9675172bf2a2cda2b3d6d03e09cbcb3f1f560eca"}}, @CGW_MOD_SET={0x18, 0x4, {{}, 0x1}}]}, 0x14c}}, 0x0)

11:27:18 executing program 2:
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100), 0x8)

11:27:18 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

11:27:19 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@logbufs={'logbufs', 0x3d, 0x2}}]})

11:27:19 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:19 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x120, 0x6, {0x0, 0x0, 0xfd, 0x0, 0x0, "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", 0x0, "9675172bf2a2cda2b3d6d03e09cbcb3f1f560eca"}}, @CGW_MOD_SET={0x18, 0x4, {{}, 0x1}}]}, 0x14c}}, 0x0)

11:27:19 executing program 2:
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100), 0x8)

11:27:19 executing program 0:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

[  789.181962][ T1761] hugetlbfs: Bad value 'p' for mount option 'size'
[  789.181962][ T1761] 
11:27:19 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

[  789.250754][ T1772] hugetlbfs: Bad value 'p' for mount option 'size'
[  789.250754][ T1772] 
[  789.279482][ T1762] XFS (loop3): Invalid superblock magic number
11:27:19 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x120, 0x6, {0x0, 0x0, 0xfd, 0x0, 0x0, "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", 0x0, "9675172bf2a2cda2b3d6d03e09cbcb3f1f560eca"}}, @CGW_MOD_SET={0x18, 0x4, {{}, 0x1}}]}, 0x14c}}, 0x0)

11:27:19 executing program 2:
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100), 0x8)

[  789.350764][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:19 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:19 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:19 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x120, 0x6, {0x0, 0x0, 0xfd, 0x0, 0x0, "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", 0x0, "9675172bf2a2cda2b3d6d03e09cbcb3f1f560eca"}}, @CGW_MOD_SET={0x18, 0x4, {{}, 0x1}}]}, 0x14c}}, 0x0)

11:27:19 executing program 2:
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100), 0x8)

11:27:19 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

11:27:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

[  789.659488][ T1789] hugetlbfs: Bad value 'p' for mount option 'size'
[  789.659488][ T1789] 
[  789.713110][ T1790] hugetlbfs: Bad value 'p' for mount option 'size'
[  789.713110][ T1790] 
11:27:19 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:19 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:19 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  789.833061][  T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.849245][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

[  789.881105][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:20 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

11:27:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

[  790.033797][ T1808] hugetlbfs: Bad value 'p' for mount option 'size'
[  790.033797][ T1808] 
[  790.069617][ T1809] hugetlbfs: Bad value 'p' for mount option 'size'
[  790.069617][ T1809] 
11:27:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

11:27:20 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

11:27:20 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

11:27:20 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4a6420, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x70]}}]})

11:27:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

11:27:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

[  790.416133][ T1822] hugetlbfs: Bad value 'p' for mount option 'size'
[  790.416133][ T1822] 
11:27:20 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2b-384-generic,xchacha12-generic)\x00'}, 0x58)
close(r0)

[  790.505070][ T1827] hugetlbfs: Bad value 'p' for mount option 'size'
[  790.505070][ T1827] 
11:27:20 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:20 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

11:27:20 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:20 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:20 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:20 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

[  790.909772][ T1849] device batadv0 entered promiscuous mode
11:27:21 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

[  790.951619][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:21 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x6b}, 0x9)

11:27:21 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:21 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:21 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:21 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  791.670710][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:21 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:21 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:21 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:21 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:22 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:22 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:22 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:22 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:22 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:22 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  792.881745][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.892428][ T1886] device batadv0 entered promiscuous mode
11:27:23 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:23 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:23 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:23 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:23 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:23 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x10000000)
write$P9_RSETATTR(r0, 0x0, 0x0)

11:27:23 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  793.910128][ T1904] device batadv0 entered promiscuous mode
[  793.920235][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:24 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:24 executing program 5:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:24 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:24 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

11:27:24 executing program 0:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:24 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:24 executing program 0:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

[  794.917765][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:25 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

11:27:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xc0, &(0x7f0000000400)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0)

[  794.960936][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:25 executing program 0:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 5:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:25 executing program 4:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 1:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 0:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

[  795.592256][T28379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.602119][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.610528][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.620625][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:25 executing program 4:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 1:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:25 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

11:27:25 executing program 4:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:25 executing program 1:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:26 executing program 5:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9759, 0x4)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

11:27:26 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

11:27:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:26 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

11:27:26 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

11:27:26 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
read$FUSE(r0, 0x0, 0x116)

[  796.512198][ T2007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:26 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

[  796.584151][ T2007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.621543][ T2007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:26 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

[  796.697109][ T2011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:26 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:26 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:27 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

11:27:27 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:27 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:27 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mknod$loop(&(0x7f0000000100)='./file2\x00', 0x6000, 0x0)

11:27:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:27 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:27 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:28 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:28 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

[  800.071862][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
11:27:30 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:30 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:30 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

[  800.474577][ T2116] net_ratelimit: 454 callbacks suppressed
[  800.474588][ T2116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.510919][ T2116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.526662][ T2116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.596784][ T2126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.606897][ T2126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.616094][ T2126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.625864][ T2126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.637290][ T2126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.646655][ T2116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.655393][ T2116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:31 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:31 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:31 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:31 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:31 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:31 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:33 executing program 2:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:33 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:33 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:33 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:34 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)

11:27:34 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530)

11:27:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

[  804.239672][ T2211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  805.510711][T13367] net_ratelimit: 537 callbacks suppressed
[  805.510717][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

11:27:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

11:27:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

11:27:36 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

11:27:36 executing program 2:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:36 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

[  806.447287][ T2239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.466359][ T2240] x_tables: ip_tables: ah match: only valid for protocol 51
[  806.476618][ T2241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
11:27:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

11:27:36 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

[  806.545906][ T2244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  806.558262][ T2255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.566506][ T2255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.656085][ T2263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.695530][ T2264] x_tables: ip_tables: ah match: only valid for protocol 51
11:27:36 executing program 1:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
socket$netlink(0x10, 0x3, 0xe)
ptrace(0x10, r1)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

11:27:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

11:27:36 executing program 2:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

11:27:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

11:27:36 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

11:27:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

[  806.868077][ T2273] x_tables: ip_tables: ah match: only valid for protocol 51
[  806.883827][ T2277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  806.907986][ T2279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:37 executing program 4:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:37 executing program 2:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

[  807.029330][ T2278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  807.037538][ T2296] x_tables: ip_tables: ah match: only valid for protocol 51
11:27:37 executing program 3:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

[  807.111258][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)

[  807.266002][ T2311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  807.308592][ T2316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  807.590794][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.630631][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.671566][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:39 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

11:27:39 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:27:39 executing program 3:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:39 executing program 4:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:39 executing program 2:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

11:27:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

11:27:40 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

[  809.999041][ T2348] x_tables: ip_tables: ah match: only valid for protocol 51
11:27:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x84, r1, 0x50b3d16341709a3f, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xea280f5fcb51f346, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x4, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x66}}}]}, 0x84}}, 0x0)

11:27:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

[  810.180389][ T2367] x_tables: ip_tables: ah match: only valid for protocol 51
11:27:40 executing program 4:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x84, r1, 0x50b3d16341709a3f, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xea280f5fcb51f346, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x4, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x66}}}]}, 0x84}}, 0x0)

11:27:40 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0)

11:27:40 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:27:40 executing program 3:
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
pivot_root(0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00')
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200))

11:27:40 executing program 0:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000100)="dbedac17bd59a709d899630deabfccdac9", 0x11, 0x1f}], 0x0, &(0x7f0000000640))

[  810.366096][ T2384] x_tables: ip_tables: ah match: only valid for protocol 51
11:27:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x84, r1, 0x50b3d16341709a3f, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xea280f5fcb51f346, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x4, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x66}}}]}, 0x84}}, 0x0)

11:27:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:27:40 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  810.563894][ T2399] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:27:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x84, r1, 0x50b3d16341709a3f, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xea280f5fcb51f346, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x4, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x66}}}]}, 0x84}}, 0x0)

[  810.662682][ T2399] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9daccbf)
[  810.685479][ T2399] FAT-fs (loop0): Filesystem has been set read-only
[  810.711102][T13363] net_ratelimit: 1 callbacks suppressed
[  810.711112][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  810.764178][ T2399] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  810.784904][ T2399] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9daccbf)
11:27:40 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:27:40 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)

[  810.855850][ T2399] FAT-fs (loop0): Filesystem has been set read-only
11:27:40 executing program 0:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000100)="dbedac17bd59a709d899630deabfccdac9", 0x11, 0x1f}], 0x0, &(0x7f0000000640))

11:27:41 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:27:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0)

11:27:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)

11:27:41 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  811.203782][ T2441] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:27:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0)

11:27:41 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  811.328148][ T2441] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9daccbf)
11:27:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0)

11:27:41 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{}, {}]}, 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfb, 0x0, 0x1f, 0x3]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:27:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)

[  811.422989][ T2441] FAT-fs (loop0): Filesystem has been set read-only
11:27:41 executing program 4:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

11:27:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x48]})

11:27:41 executing program 0:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000100)="dbedac17bd59a709d899630deabfccdac9", 0x11, 0x1f}], 0x0, &(0x7f0000000640))

11:27:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0)

11:27:41 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)

11:27:41 executing program 4:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

[  811.761811][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:41 executing program 5:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

11:27:41 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

11:27:41 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x28, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008151e00f80ecdb4cb9040000f0007c5a685ea17d2037af15c40006586500dc2976d1000000a41151", 0x2e}], 0x1, 0x0, 0x0, 0xc000000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

11:27:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x48]})

[  811.923577][ T2497] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:27:42 executing program 4:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

[  811.964994][ T2497] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9daccbf)
11:27:42 executing program 5:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

11:27:42 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

[  812.075399][ T2497] FAT-fs (loop0): Filesystem has been set read-only
11:27:42 executing program 4:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

11:27:42 executing program 0:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000100)="dbedac17bd59a709d899630deabfccdac9", 0x11, 0x1f}], 0x0, &(0x7f0000000640))

11:27:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x28, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008151e00f80ecdb4cb9040000f0007c5a685ea17d2037af15c40006586500dc2976d1000000a41151", 0x2e}], 0x1, 0x0, 0x0, 0xc000000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

11:27:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x48]})

11:27:42 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

11:27:42 executing program 5:
r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, &(0x7f0000000100)='dirsync\x00', 0x2, 0x4)

11:27:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="65580000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0)

[  812.396848][ T2539] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  812.434233][ T2539] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9daccbf)
11:27:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x48]})

11:27:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x28, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008151e00f80ecdb4cb9040000f0007c5a685ea17d2037af15c40006586500dc2976d1000000a41151", 0x2e}], 0x1, 0x0, 0x0, 0xc000000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

[  812.486297][ T2539] FAT-fs (loop0): Filesystem has been set read-only
11:27:42 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

[  812.576837][ T2553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

11:27:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x28, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008151e00f80ecdb4cb9040000f0007c5a685ea17d2037af15c40006586500dc2976d1000000a41151", 0x2e}], 0x1, 0x0, 0x0, 0xc000000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)

[  812.792484][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:42 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r1, r0, 0x0, 0x5)

11:27:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "167c52990593fc2787f75ebe74270b1238090942a6b1acd1447c20243cbdd070d718c43ae5a7c0ce2035a6dba2422f8b43f305b0130a5d84fa6d4f28029b747a3414ef605fdf4e30366af956795a6048cca55d862080a5f60c7d97319da241728b569a5ab0ce85d1f07b51745487e0ad3c3da8bae4a90caef700461254ba7361f0c510d283e746028ebee30a8076698df57912685fb1ec25e969e6be5a14b1f9f89dbb6db59919952d9ae273848979ea8ff67adab03a58cad0b95dfa61406efe01410eafac8cac50c8f67cdf97070f15dba57444770c892c0602de86ee7317855ec6b2837cbd4dfb2f4d36c3fb47725b4377087d32548c19a285555a0db6fcdc"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

11:27:42 executing program 3:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

11:27:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

[  812.953930][   T28] audit: type=1804 audit(1598354862.989:311): pid=2577 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir530167906/syzkaller.z2Niva/943/cgroup.controllers" dev="sda1" ino=16365 res=1 errno=0
[  812.957147][ T2577] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
11:27:43 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r1, r0, 0x0, 0x5)

11:27:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

[  813.174988][ T2583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  813.190915][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.239798][ T2586] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  813.267303][ T2597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:43 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="65580000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0)

11:27:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "167c52990593fc2787f75ebe74270b1238090942a6b1acd1447c20243cbdd070d718c43ae5a7c0ce2035a6dba2422f8b43f305b0130a5d84fa6d4f28029b747a3414ef605fdf4e30366af956795a6048cca55d862080a5f60c7d97319da241728b569a5ab0ce85d1f07b51745487e0ad3c3da8bae4a90caef700461254ba7361f0c510d283e746028ebee30a8076698df57912685fb1ec25e969e6be5a14b1f9f89dbb6db59919952d9ae273848979ea8ff67adab03a58cad0b95dfa61406efe01410eafac8cac50c8f67cdf97070f15dba57444770c892c0602de86ee7317855ec6b2837cbd4dfb2f4d36c3fb47725b4377087d32548c19a285555a0db6fcdc"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

11:27:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

11:27:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

11:27:43 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r1, r0, 0x0, 0x5)

[  813.621112][   T28] audit: type=1804 audit(1598354863.659:312): pid=2611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir530167906/syzkaller.z2Niva/944/cgroup.controllers" dev="sda1" ino=15908 res=1 errno=0
[  813.633544][ T2611] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  813.658913][ T2612] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
11:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  813.689838][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:43 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r1, r0, 0x0, 0x5)

11:27:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

[  813.720152][   T28] audit: type=1804 audit(1598354863.659:313): pid=2612 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/924/cgroup.controllers" dev="sda1" ino=15973 res=1 errno=0
[  813.788656][ T2586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  813.830973][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.918727][   T28] audit: type=1804 audit(1598354863.949:314): pid=2631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/925/cgroup.controllers" dev="sda1" ino=15873 res=1 errno=0
[  813.950912][ T2631] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  814.109019][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  814.120349][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  814.128184][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
11:27:44 executing program 3:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

11:27:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

11:27:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

11:27:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

11:27:44 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="65580000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0)

[  814.212925][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  814.244058][ T2621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  814.324885][ T2642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  814.372871][   T28] audit: type=1804 audit(1598354864.409:315): pid=2644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/926/cgroup.controllers" dev="sda1" ino=16100 res=1 errno=0
11:27:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000080000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a000000000000000000000900010073797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r2, 0x0, 0x100000001)

11:27:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  814.761451][   T28] audit: type=1804 audit(1598354864.799:316): pid=2660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir530167906/syzkaller.z2Niva/946/cgroup.controllers" dev="sda1" ino=16086 res=1 errno=0
[  814.824473][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.904399][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:45 executing program 0:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  815.118925][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:27:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  815.205343][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  815.231584][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  815.361374][ T2654] A link change request failed with some changes committed already. Interface veth6 may have been left with an inconsistent configuration, please check.
[  815.378706][ T2656] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
11:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  815.414168][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:27:45 executing program 3:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  815.472255][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  815.516652][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  815.547161][ T2659] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
11:27:45 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="65580000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0)

11:27:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  815.640849][ T2675] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  815.659545][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  815.742556][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  815.750319][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
11:27:46 executing program 0:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  815.921594][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.087046][ T2691] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
11:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  816.173335][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  816.199008][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
11:27:46 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  816.232602][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.263675][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
11:27:46 executing program 3:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  816.546800][ T2709] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  816.581520][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:27:46 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfeffffff, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

[  816.612905][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  816.638970][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
11:27:46 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

11:27:47 executing program 0:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  816.961376][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.097171][ T2726] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  817.171548][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:27:47 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  817.303296][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
11:27:47 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  817.411304][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  817.699259][ T2734] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
11:27:47 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  817.828763][ T2741] __nla_validate_parse: 8 callbacks suppressed
[  817.828776][ T2741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  817.956629][ T2746] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
11:27:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

11:27:48 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  818.001592][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:48 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

11:27:48 executing program 4:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  818.661504][ T2770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:48 executing program 0:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  818.759785][ T2770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.786347][ T2774] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  818.878318][ T2770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:49 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  818.955745][ T2772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.994385][ T2772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.042272][ T2775] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
11:27:49 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  819.088668][ T2784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
11:27:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

11:27:49 executing program 4:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  819.240816][ T2786] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  819.472755][ T2799] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:49 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  819.675604][ T2801] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
11:27:49 executing program 4:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

11:27:49 executing program 0:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

[  820.114993][ T2812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:50 executing program 5:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  820.203089][ T2814] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
11:27:50 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

11:27:50 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x2, 0x4004, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x60, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x900}, 0x1000000}], 0x92, 0x0)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004100)=""/4092, 0xffc}], 0x1}}], 0x40000000000005b, 0x0, 0x0)

[  820.244102][ T2817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
11:27:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@rose)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x228, 0x0, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'vlan1\x00'}, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x15c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

[  820.385249][ T2821] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  820.529648][ T2833] xt_hashlimit: Unknown mode mask 15C, kernel too old?
[  820.574703][ T2837] xt_hashlimit: Unknown mode mask 15C, kernel too old?
11:27:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@rose)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x228, 0x0, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'vlan1\x00'}, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x15c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

11:27:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

11:27:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@rose)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x228, 0x0, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'vlan1\x00'}, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x15c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

[  820.821377][ T2841] xt_hashlimit: Unknown mode mask 15C, kernel too old?
11:27:50 executing program 0:
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0x0, 0x6, 0xfffc, 0xad}, @x25={0x2, 0xfd, 0xf7, "4ac29a5fbd1749d99168780dc4434c9f935aba624b2943359f7b43f95efca17c375a031a7b331e5a28c1553389386cc9a576e45b988773ba2049d7643aaa463c9ff10879e6d5d0fa32a43e1a87ccd0d42f50c7f9b2b2c8aa1dafe179580dc31c485fed602f279454cff40bd6bc9ea2e41ae794c25be00c703a22a0decfcf3e3a25f73e9225ca66a328dd5bc752cdcb881efdece62e7dc8d570ae0e71d23306eb9028a863e61c9c1863d2ec29e0"}}, 0xba)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000380)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="05", 0x1}], 0x1}}], 0x2, 0x604d881)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000140)=0x101)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000020000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x24008891}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0)

11:27:51 executing program 5:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

11:27:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

11:27:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@rose)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x228, 0x0, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'vlan1\x00'}, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x15c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

[  821.106798][ T2848] xt_hashlimit: Unknown mode mask 15C, kernel too old?
[  821.121790][T13364] net_ratelimit: 22 callbacks suppressed
[  821.121801][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.256290][ T2856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
11:27:51 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

11:27:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

11:27:51 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  821.431612][ T2860] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  821.463753][ T2861] xt_hashlimit: Unknown mode mask 15C, kernel too old?
11:27:51 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

11:27:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

11:27:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

11:27:51 executing program 5:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  821.698586][ T2879] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
11:27:51 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

[  821.747017][ T2879] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:52 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"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"})

11:27:52 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

11:27:52 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  822.150904][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.246408][   T28] audit: type=1804 audit(1598354872.279:317): pid=2903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/923/bus" dev="sda1" ino=15839 res=1 errno=0
[  822.312088][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"1c12d64c6e4b1338612f7f087d857437d6521121ad1569d9f3387c57e194317538b4265ff6335c718484a22f79a916da90a705905d399f6fb4b293cb85405f5d1c9d2dd87e70858a4bdbb3aeaab1b1e2b2c957dbf5d0e43f6330ece484aa0845d048dae309afbfa2f459e75d62049544442b19ed695442ba7c2065036d37be8b728156becfb20e7a3cb8f7adb6f58f2055a36a6e0f799807bcf7cc5cf3a0c6d8aab0f342ef3c59448e0dba7be90de389a19db0f30dbbb45bd1eae22889ef3ce553b56fdb127bcfed461b02e3cc16b60a16178085388d6acec6d917adb67d8b483b5d02e54461f6a7c1e29307cdf5d6b41d8b8ca993333068dbb1149aa19a505da59aad236f034046646b8d7b0d04a13da155a810d5437b0511add15a211d327a36f22158ed59c5959f2235e02a6c2578d07350ab4fb1233c3775b4e8fde54166bee404752a226e087522ebba642e1a02aaa676bbec89c4adcab72dad2d31cdaf32b0c265edac1e385ffe98fb478dedc944e5b81bb5bddc5e0e68cc06110cee7891f9503453911ad37c696a602c1352d653e5216c35a1977870aedab9b52cd6bb64da418387d03fd294a13b943d9bb42a5ddeb0b4481f50095ea7dee21488d2f854292931f74b3d385b8996ed5c87cf04c056e8a0ddf3fa601c6c86d75a588d0c93929e685db777889e3ea846eae59d887e7d134ac61fe8bc2ac32b30ba00a2887943949e9903bbdc4b1baeb1e573dd1d3640ea528c0d65321a5c06ffbdec7ab293a22e013078943f211935b8a413ac5e66bafb543a6d1bc42d7c0a475da1bf10623c008868de10cceb1253c067a10a8beda2c8ffac1d310f6f1e567ccd6a44361581f2e40600c125dd4abfab32a269a40144d16f7a57861271db5679907902267d6a44ae4f122f60e3b09746af28e77e1f978aae6ef300ce861034efa18b716e7481bea0dcbb2ce354235d856a660f8985bbb637546b0fa2038186bf3e46e0857237c1ba6407c24462450440e6aacc17246e1792853905ba59c08c03241b1341861614b853ec6e3619141a3dcdea79e2affe00aee2f5be33806a9b9ce7b1bd483971bf0286206376cae53e153e9d8943252937a1594d5e8dc62e4438a0225931d2a51cfccd5cfbab4d1d40d21574f691c91328668e9a475a1939c7ec36305ce8bb699f3fb63015dca7c183d83d3356dc9ceee694bc9946eb7dffadf55bb7feaf269ac53703ec63967afd9a64806fa7e68bbd91c8288205d3d2aea4e1c8651d9f97229cbec940ec2635a6bb80e6b6f1d39ace169460724f67d69799942cf18fa663230db4d0dcfb76f171cb991ebb8e1c14ea3daa29a068f79a82d18bb7381641394821a3e373a46fa19b7dcd4d2c0f246a2b5277784166d0ad2f4b154dd4225e1074a26a239f0c8223c321b91776f26627a8824959ea65dfe5f4cdcf6aa3a5dd"})

[  822.398578][ T2919] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  822.414075][   T28] audit: type=1804 audit(1598354872.369:318): pid=2903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/923/file1/bus" dev="loop1" ino=54 res=1 errno=0
11:27:52 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:52 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  822.445817][ T2919] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
[  822.561326][   T28] audit: type=1804 audit(1598354872.399:319): pid=2912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/923/file1/bus" dev="loop1" ino=54 res=1 errno=0
11:27:52 executing program 5:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

11:27:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"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"})

[  822.730653][   T28] audit: type=1804 audit(1598354872.399:320): pid=2918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/923/file1/bus" dev="loop1" ino=54 res=1 errno=0
11:27:52 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:52 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"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"})

11:27:53 executing program 5:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  822.984547][   T28] audit: type=1804 audit(1598354872.409:321): pid=2912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/923/file1/bus" dev="loop1" ino=54 res=1 errno=0
11:27:53 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  823.126691][   T28] audit: type=1804 audit(1598354872.889:322): pid=2939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/924/file1/bus" dev="sda1" ino=16383 res=1 errno=0
[  823.200227][   T28] audit: type=1804 audit(1598354872.889:323): pid=2944 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/924/file1/bus" dev="sda1" ino=16383 res=1 errno=0
[  823.224483][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

11:27:53 executing program 2:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

11:27:53 executing program 0:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:53 executing program 3:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  823.296653][   T28] audit: type=1804 audit(1598354872.939:324): pid=2934 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/924/file1/bus" dev="sda1" ino=16383 res=1 errno=0
[  823.330016][   T28] audit: type=1804 audit(1598354873.339:325): pid=2966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir327083520/syzkaller.NvUxZc/917/file1/bus" dev="loop5" ino=55 res=1 errno=0
[  823.395993][ T2972] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  823.405139][ T2972] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:53 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:53 executing program 5:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  823.712529][   T28] audit: type=1804 audit(1598354873.339:326): pid=2966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir327083520/syzkaller.NvUxZc/917/file1/bus" dev="loop5" ino=55 res=1 errno=0
11:27:53 executing program 0:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:53 executing program 3:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

11:27:54 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:54 executing program 2:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

[  824.235716][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.235731][ T3014] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
11:27:54 executing program 0:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:54 executing program 5:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  824.346152][ T3014] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
[  824.392916][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:54 executing program 3:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:54 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:54 executing program 2:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:54 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:54 executing program 2:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:54 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"1c12d64c6e4b1338612f7f087d857437d6521121ad1569d9f3387c57e194317538b4265ff6335c718484a22f79a916da90a705905d399f6fb4b293cb85405f5d1c9d2dd87e70858a4bdbb3aeaab1b1e2b2c957dbf5d0e43f6330ece484aa0845d048dae309afbfa2f459e75d62049544442b19ed695442ba7c2065036d37be8b728156becfb20e7a3cb8f7adb6f58f2055a36a6e0f799807bcf7cc5cf3a0c6d8aab0f342ef3c59448e0dba7be90de389a19db0f30dbbb45bd1eae22889ef3ce553b56fdb127bcfed461b02e3cc16b60a16178085388d6acec6d917adb67d8b483b5d02e54461f6a7c1e29307cdf5d6b41d8b8ca993333068dbb1149aa19a505da59aad236f034046646b8d7b0d04a13da155a810d5437b0511add15a211d327a36f22158ed59c5959f2235e02a6c2578d07350ab4fb1233c3775b4e8fde54166bee404752a226e087522ebba642e1a02aaa676bbec89c4adcab72dad2d31cdaf32b0c265edac1e385ffe98fb478dedc944e5b81bb5bddc5e0e68cc06110cee7891f9503453911ad37c696a602c1352d653e5216c35a1977870aedab9b52cd6bb64da418387d03fd294a13b943d9bb42a5ddeb0b4481f50095ea7dee21488d2f854292931f74b3d385b8996ed5c87cf04c056e8a0ddf3fa601c6c86d75a588d0c93929e685db777889e3ea846eae59d887e7d134ac61fe8bc2ac32b30ba00a2887943949e9903bbdc4b1baeb1e573dd1d3640ea528c0d65321a5c06ffbdec7ab293a22e013078943f211935b8a413ac5e66bafb543a6d1bc42d7c0a475da1bf10623c008868de10cceb1253c067a10a8beda2c8ffac1d310f6f1e567ccd6a44361581f2e40600c125dd4abfab32a269a40144d16f7a57861271db5679907902267d6a44ae4f122f60e3b09746af28e77e1f978aae6ef300ce861034efa18b716e7481bea0dcbb2ce354235d856a660f8985bbb637546b0fa2038186bf3e46e0857237c1ba6407c24462450440e6aacc17246e1792853905ba59c08c03241b1341861614b853ec6e3619141a3dcdea79e2affe00aee2f5be33806a9b9ce7b1bd483971bf0286206376cae53e153e9d8943252937a1594d5e8dc62e4438a0225931d2a51cfccd5cfbab4d1d40d21574f691c91328668e9a475a1939c7ec36305ce8bb699f3fb63015dca7c183d83d3356dc9ceee694bc9946eb7dffadf55bb7feaf269ac53703ec63967afd9a64806fa7e68bbd91c8288205d3d2aea4e1c8651d9f97229cbec940ec2635a6bb80e6b6f1d39ace169460724f67d69799942cf18fa663230db4d0dcfb76f171cb991ebb8e1c14ea3daa29a068f79a82d18bb7381641394821a3e373a46fa19b7dcd4d2c0f246a2b5277784166d0ad2f4b154dd4225e1074a26a239f0c8223c321b91776f26627a8824959ea65dfe5f4cdcf6aa3a5dd"})

11:27:55 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

11:27:55 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

11:27:55 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8400fffffffa)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

11:27:55 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

[  825.281397][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"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"})

[  825.326469][ T3067] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  825.352528][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:55 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

[  825.368307][ T3067] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:55 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

11:27:55 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(r2, r0)

11:27:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8040ae9f, &(0x7f0000000140)={"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"})

11:27:55 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

11:27:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

11:27:56 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

11:27:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:56 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
exit(0x0)
splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0)

11:27:56 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

[  826.006214][ T3106] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
11:27:56 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

[  826.061002][ T3106] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:56 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, [], [{0x801, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0xffffffff}]})

[  826.125688][ T3111] REISERFS warning (device loop0): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  826.125688][ T3111] 
11:27:56 executing program 2:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

11:27:56 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x5cbc, 0x0, 0x0, 0x0})

[  826.312897][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:56 executing program 2:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

11:27:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

[  826.512123][ T3142] REISERFS warning (device loop0): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  826.512123][ T3142] 
11:27:56 executing program 1:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

11:27:56 executing program 2:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

[  826.605285][ T3149] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  826.605285][ T3149] 
[  826.735207][ T3161] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  826.757575][ T3161] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'.
11:27:57 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
exit(0x0)
splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0)

11:27:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:57 executing program 1:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

11:27:57 executing program 2:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

11:27:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:57 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

11:27:57 executing program 1:
futex(0x0, 0x8c, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0)

11:27:57 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

[  827.192413][ T3188] REISERFS warning (device loop0): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  827.192413][ T3188] 
[  827.225312][ T3189] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  827.225312][ T3189] 
[  827.267529][ T3199] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  827.335798][ T3209] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  827.350686][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:57 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:57 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

11:27:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:57 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

[  827.579317][ T3224] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  827.664011][ T3226] REISERFS warning (device loop0): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  827.664011][ T3226] 
[  827.945077][ T3232] overlayfs: failed to resolve 'file0G	': -2
11:27:58 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
exit(0x0)
splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0)

11:27:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002500)={[{@errors_continue='errors=continue'}]})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

11:27:58 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

11:27:58 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

11:27:58 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

11:27:58 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:58 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

[  828.163914][ T3249] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
11:27:58 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

[  828.217350][ T3251] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  828.217350][ T3251] 
11:27:58 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffdf}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe, &(0x7f0000000180)="fee63bc32f751080b81a415e633e"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = getpid()
tkill(r1, 0x2f)

11:27:58 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

11:27:58 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:58 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

[  828.390830][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.399043][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.511785][ T3280] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
11:27:59 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
exit(0x0)
splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0)

11:27:59 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

[  829.441251][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:27:59 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:27:59 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

11:28:00 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

[  830.456118][ T3361] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  830.473693][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:00 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:00 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

11:28:00 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

[  830.765015][ T3376] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
11:28:00 executing program 2:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0)

11:28:01 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

11:28:01 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

[  831.041594][ T3391] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  831.151000][ T3393] tipc: All keys are flushed!
11:28:01 executing program 4:
prctl$PR_MCE_KILL(0x39, 0x0, 0x2)

[  831.209240][ T3395] tipc: All keys are flushed!
11:28:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100))

11:28:01 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

11:28:01 executing program 2:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0)

11:28:01 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x3063, @mcast2, 0x4}, 0x1c)
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
quotactl(0x800, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4)

[  831.433206][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:01 executing program 4:
prctl$PR_MCE_KILL(0x39, 0x0, 0x2)

[  831.493278][ T3406] tipc: All keys are flushed!
[  831.512984][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:01 executing program 2:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0)

11:28:01 executing program 2:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0)

[  831.801220][ T3418] tipc: All keys are flushed!
11:28:01 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:02 executing program 4:
prctl$PR_MCE_KILL(0x39, 0x0, 0x2)

[  831.988601][ T3422] tipc: All keys are flushed!
11:28:02 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

[  832.139616][ T3407] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:28:02 executing program 4:
prctl$PR_MCE_KILL(0x39, 0x0, 0x2)

11:28:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100))

11:28:02 executing program 2:
mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8})

11:28:02 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:02 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

11:28:02 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:02 executing program 2:
mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8})

[  832.551729][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:02 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

[  833.116081][ T3473] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  833.131728][ T3463] overlayfs: failed to resolve './file0': -2
[  833.388440][   T28] kauditd_printk_skb: 40 callbacks suppressed
[  833.388457][   T28] audit: type=1804 audit(1598354883.419:367): pid=3436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir324449057/syzkaller.E8iWjW/958/bus/file0" dev="sda1" ino=16327 res=1 errno=0
[  833.598001][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.600934][   T28] audit: type=1804 audit(1598354883.629:368): pid=3436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir324449057/syzkaller.E8iWjW/958/bus/file0" dev="sda1" ino=16327 res=1 errno=0
11:28:03 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:03 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:03 executing program 2:
mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8})

11:28:03 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)

11:28:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

11:28:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100))

11:28:03 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:03 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:03 executing program 2:
mq_open(&(0x7f0000000280)='\'sel\x88\x8d\x92i_C^\xe4\xc5\x05\b\xac\x8b\xca\xdaJ\xe8\x87\xcfct!e\f_', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8})

11:28:04 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  833.992398][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.052858][ T3504] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
11:28:04 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100))

[  834.470971][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.642657][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.523307][ T3527] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  835.671017][T13363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.711148][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.258320][ T3516] overlayfs: failed to resolve './bus': -2
[  837.514490][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.750909][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.999543][ T3523] overlayfs: failed to resolve './bus': -2
[  838.086146][ T3514] overlayfs: failed to resolve './bus': -2
[  838.247387][   T28] audit: type=1804 audit(1598354888.279:369): pid=3514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir324449057/syzkaller.E8iWjW/959/bus/file0" dev="sda1" ino=16327 res=1 errno=0
11:28:08 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:08 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:08 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:08 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:08 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:08 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  838.791722][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.314845][ T3556] overlayfs: failed to resolve './file0': -2
[  839.330369][ T3557] overlayfs: failed to resolve './bus': -2
[  839.365618][   T28] audit: type=1804 audit(1598354889.399:370): pid=3564 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/963/bus/file0" dev="sda1" ino=16290 res=1 errno=0
[  839.447254][ T3553] overlayfs: failed to resolve './bus': -2
[  839.466434][   T28] audit: type=1804 audit(1598354889.499:371): pid=3557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/948/bus/file0" dev="sda1" ino=16293 res=1 errno=0
[  839.834068][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.944945][   T28] audit: type=1804 audit(1598354889.979:372): pid=3567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir324449057/syzkaller.E8iWjW/960/bus/file0" dev="sda1" ino=16280 res=1 errno=0
11:28:10 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  840.025086][   T28] audit: type=1804 audit(1598354890.059:373): pid=3556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir327083520/syzkaller.NvUxZc/935/bus/file0" dev="sda1" ino=16287 res=1 errno=0
[  840.042241][ T3559] overlayfs: failed to resolve './bus': -2
11:28:10 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  840.551836][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.610698][ T3574] overlayfs: failed to resolve './bus': -2
[  840.668413][   T28] audit: type=1804 audit(1598354890.699:374): pid=3574 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/949/bus/file0" dev="sda1" ino=16329 res=1 errno=0
[  840.803711][   T28] audit: type=1804 audit(1598354890.829:375): pid=3555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir530167906/syzkaller.z2Niva/980/bus/file0" dev="overlay" ino=16327 res=1 errno=0
[  840.853596][ T3583] overlayfs: failed to resolve './file0': -2
[  840.870851][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:11 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  840.972966][   T28] audit: type=1804 audit(1598354891.009:376): pid=3554 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir349325598/syzkaller.FXK059/941/bus/file0" dev="overlay" ino=16379 res=1 errno=0
11:28:11 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  841.233387][   T28] audit: type=1804 audit(1598354891.269:377): pid=3579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/964/bus/file0" dev="sda1" ino=16308 res=1 errno=0
11:28:11 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:11 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:11 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  841.914180][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:12 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  842.966308][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.156627][ T3605] overlayfs: failed to resolve './bus': -2
[  843.568493][   T28] audit: type=1804 audit(1598354893.589:378): pid=3585 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir327083520/syzkaller.NvUxZc/936/bus/file0" dev="overlay" ino=15883 res=1 errno=0
[  843.601625][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.610183][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:13 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  843.743299][   T28] audit: type=1804 audit(1598354893.769:379): pid=3601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir349325598/syzkaller.FXK059/942/bus/file0" dev="overlay" ino=15886 res=1 errno=0
11:28:14 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  844.032836][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:14 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:14 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  844.781967][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  844.781986][   T28] audit: type=1804 audit(1598354894.809:383): pid=3591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/950/bus/file0" dev="overlay" ino=16005 res=1 errno=0
11:28:15 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

[  845.106743][ T3621] overlayfs: failed to resolve './bus': -2
[  845.135918][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.263345][   T28] audit: type=1804 audit(1598354895.299:384): pid=3613 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir327083520/syzkaller.NvUxZc/937/bus/file0" dev="overlay" ino=15928 res=1 errno=0
11:28:15 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000086dd73797a6b616c6c65723000000000000074756e6c3000000000000000000000007369743000000000000000000000000069666230000000000000000000010000000000000000000000000000ffffffffffff00000000000000002801000060010000b0010000697036000000000000000000000000000000000000000000000000000000000050000000000000000800000000000000000000000000000000000000000000000000ffffac1414aa0000000000000000000000040000000000000000000000000000000000000000003a4000ffbf000000000000000000006d61726b5f6d000000000000007f0000000000000000000000000000000008000000000000000000000000001f00000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000"/576]}, 0x2b8)

11:28:15 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:15 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

11:28:15 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

11:28:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  846.104683][   T28] audit: type=1804 audit(1598354896.139:385): pid=3617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/966/bus/file0" dev="overlay" ino=15884 res=1 errno=0
11:28:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  846.180611][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.633388][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  847.197993][T13370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:17 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  847.498798][   T28] audit: type=1804 audit(1598354897.529:386): pid=3621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir530167906/syzkaller.z2Niva/982/bus/file0" dev="sda1" ino=15893 res=1 errno=0
[  847.931138][   T28] audit: type=1804 audit(1598354897.959:387): pid=3628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir349325598/syzkaller.FXK059/943/bus/file0" dev="overlay" ino=15957 res=1 errno=0
11:28:18 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  848.017520][   T28] audit: type=1804 audit(1598354898.049:388): pid=3643 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/951/bus/file0" dev="overlay" ino=15920 res=1 errno=0
[  848.240136][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.374148][   T28] audit: type=1804 audit(1598354898.409:389): pid=3692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir327083520/syzkaller.NvUxZc/938/bus/file0" dev="sda1" ino=15867 res=1 errno=0
11:28:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:18 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  849.278732][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.503626][   T28] audit: type=1804 audit(1598354899.539:390): pid=3706 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/967/bus/file0" dev="overlay" ino=15865 res=1 errno=0
[  849.554147][   T28] audit: type=1804 audit(1598354899.589:391): pid=3700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir367783768/syzkaller.bmrwPD/967/bus/file0" dev="overlay" ino=15865 res=1 errno=0
[  849.672691][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:19 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:19 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

[  850.337103][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  851.358957][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  852.430303][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.713201][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.055655][ T3756] overlayfs: failed to resolve './bus': -2
[  853.193929][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.450314][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:23 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x67)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000002)
r3 = signalfd4(r2, &(0x7f00000000c0)={[0x100000000]}, 0x8, 0x800)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431)

11:28:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

[  854.484443][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.924972][   T28] audit: type=1804 audit(1598354904.949:392): pid=3755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379239923/syzkaller.ssZgtp/952/bus/file0" dev="overlay" ino=15851 res=1 errno=0
11:28:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:25 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

11:28:25 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r1, 0x36)
dup3(r0, r1, 0x0)

[  855.539907][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:25 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r1, 0x36)
dup3(r0, r1, 0x0)

[  855.751067][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:26 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r1, 0x36)
dup3(r0, r1, 0x0)

11:28:26 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

11:28:26 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r1, 0x36)
dup3(r0, r1, 0x0)

[  856.559708][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:26 executing program 1:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a85238810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd364111140f000027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ff858b68b0adf9deab3323aa9fdff52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581de796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a4940b4007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b540500880b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f65ac3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73750038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9209b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c0703000000000000c20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5ddff0016b62040bf8702ae12c76e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a7dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc000000000000000030e7922a92822e2bb7cba03d27afb1041da2421abf3e0c2d74cf6c8b9dba9123b8ee1b5e45c5d97322cef3b5fc89bd8f53e1a8f5806b967d9548a5bbfb2f0aaf730388df92988988ab165792dc7bee947c"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

11:28:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:26 executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

11:28:27 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

[  857.306675][ T3935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.317044][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:27 executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

[  857.607678][T13364] net_ratelimit: 4 callbacks suppressed
[  857.607690][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:27 executing program 1:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

[  857.771821][ T3949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.782126][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.870988][ T3945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.880427][  T244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.942356][ T3945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:28 executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a85238810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd364111140f000027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ff858b68b0adf9deab3323aa9fdff52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581de796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a4940b4007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b540500880b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f65ac3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73750038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9209b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c0703000000000000c20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5ddff0016b62040bf8702ae12c76e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a7dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc000000000000000030e7922a92822e2bb7cba03d27afb1041da2421abf3e0c2d74cf6c8b9dba9123b8ee1b5e45c5d97322cef3b5fc89bd8f53e1a8f5806b967d9548a5bbfb2f0aaf730388df92988988ab165792dc7bee947c"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

[  858.046749][ T3931] ==================================================================
[  858.055262][ T3931] BUG: KASAN: use-after-free in task_work_run+0x116/0x190
[  858.062391][ T3931] Read of size 8 at addr ffff8880a5e08d00 by task syz-executor.3/3931
[  858.070579][ T3931] 
[  858.072946][ T3931] CPU: 1 PID: 3931 Comm: syz-executor.3 Not tainted 5.9.0-rc2-next-20200825-syzkaller #0
[  858.082769][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  858.092850][ T3931] Call Trace:
[  858.096255][ T3931]  dump_stack+0x18f/0x20d
[  858.100607][ T3931]  ? task_work_run+0x116/0x190
[  858.105392][ T3931]  ? task_work_run+0x116/0x190
[  858.110182][ T3931]  print_address_description.constprop.0.cold+0xae/0x497
[  858.117239][ T3931]  ? vprintk_func+0x97/0x1a6
[  858.121857][ T3931]  ? task_work_run+0x116/0x190
[  858.126632][ T3931]  ? task_work_run+0x116/0x190
[  858.131412][ T3931]  kasan_report.cold+0x1f/0x37
[  858.136197][ T3931]  ? task_work_run+0x116/0x190
[  858.140975][ T3931]  task_work_run+0x116/0x190
[  858.145597][ T3931]  exit_to_user_mode_prepare+0x195/0x1c0
[  858.151346][ T3931]  syscall_exit_to_user_mode+0x59/0x2b0
[  858.157008][ T3931]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  858.162926][ T3931] RIP: 0033:0x45d579
[  858.166837][ T3931] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  858.186489][ T3931] RSP: 002b:00007f39a4ed6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  858.194958][ T3931] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d579
[  858.202951][ T3931] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  858.210946][ T3931] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000
[  858.218940][ T3931] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000118cf4c
[  858.227043][ T3931] R13: 00007ffd0a6ddb4f R14: 00007f39a4ed79c0 R15: 000000000118cf4c
[  858.235050][ T3931] 
[  858.237389][ T3931] Allocated by task 3944:
[  858.241739][ T3931]  kasan_save_stack+0x1b/0x40
[  858.246431][ T3931]  __kasan_kmalloc.constprop.0+0xbf/0xd0
[  858.252081][ T3931]  kmem_cache_alloc+0x138/0x3a0
[  858.256949][ T3931]  __alloc_file+0x21/0x350
[  858.261382][ T3931]  alloc_empty_file+0x6d/0x170
[  858.266183][ T3931]  alloc_file+0x5e/0x5a0
[  858.270451][ T3931]  alloc_file_pseudo+0x165/0x250
[  858.275487][ T3931]  sock_alloc_file+0x4f/0x190
[  858.280183][ T3931]  __sys_socket+0x13d/0x200
[  858.284733][ T3931]  __x64_sys_socket+0x6f/0xb0
[  858.289426][ T3931]  do_syscall_64+0x2d/0x70
[  858.294467][ T3931]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  858.300391][ T3931] 
[  858.302727][ T3931] Freed by task 11995:
[  858.306813][ T3931]  kasan_save_stack+0x1b/0x40
[  858.311507][ T3931]  kasan_set_track+0x1c/0x30
[  858.316123][ T3931]  kasan_set_free_info+0x1b/0x30
[  858.321106][ T3931]  __kasan_slab_free+0xd8/0x120
[  858.325983][ T3931]  kmem_cache_free.part.0+0x67/0x1f0
[  858.331287][ T3931]  rcu_core+0x61e/0x1220
[  858.335567][ T3931]  __do_softirq+0x2de/0xa24
[  858.340079][ T3931] 
[  858.342418][ T3931] Last call_rcu():
[  858.347217][ T3931]  kasan_save_stack+0x1b/0x40
[  858.351938][ T3931]  kasan_record_aux_stack+0x82/0xb0
[  858.357189][ T3931]  call_rcu+0x14f/0x7f0
[  858.361357][ T3931]  task_work_run+0xdd/0x190
[  858.365877][ T3931]  exit_to_user_mode_prepare+0x195/0x1c0
[  858.371523][ T3931]  syscall_exit_to_user_mode+0x59/0x2b0
[  858.377088][ T3931]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  858.382982][ T3931] 
[  858.385314][ T3931] Second to last call_rcu():
[  858.389918][ T3931]  kasan_save_stack+0x1b/0x40
[  858.394648][ T3931]  kasan_record_aux_stack+0x82/0xb0
[  858.399867][ T3931]  call_rcu+0x14f/0x7f0
[  858.404560][ T3931]  task_work_run+0xdd/0x190
[  858.409094][ T3931]  exit_to_user_mode_prepare+0x195/0x1c0
[  858.414745][ T3931]  syscall_exit_to_user_mode+0x59/0x2b0
[  858.420307][ T3931]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  858.426226][ T3931] 
[  858.428565][ T3931] The buggy address belongs to the object at ffff8880a5e08d00
[  858.428565][ T3931]  which belongs to the cache filp of size 488
[  858.442026][ T3931] The buggy address is located 0 bytes inside of
[  858.442026][ T3931]  488-byte region [ffff8880a5e08d00, ffff8880a5e08ee8)
[  858.455158][ T3931] The buggy address belongs to the page:
[  858.460815][ T3931] page:0000000065120bc1 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa5e08
[  858.470985][ T3931] flags: 0xfffe0000000200(slab)
[  858.475886][ T3931] raw: 00fffe0000000200 ffffea0002869cc8 ffffea000260d988 ffff88821bc47b00
[  858.484492][ T3931] raw: 0000000000000000 ffff8880a5e08080 0000000100000006 0000000000000000
[  858.493089][ T3931] page dumped because: kasan: bad access detected
[  858.499509][ T3931] 
[  858.501843][ T3931] Memory state around the buggy address:
[  858.507487][ T3931]  ffff8880a5e08c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  858.515573][ T3931]  ffff8880a5e08c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  858.523659][ T3931] >ffff8880a5e08d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  858.531755][ T3931]                    ^
[  858.535837][ T3931]  ffff8880a5e08d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  858.543936][ T3931]  ffff8880a5e08e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  858.552031][ T3931] ==================================================================
[  858.560124][ T3931] Disabling lock debugging due to kernel taint
11:28:28 executing program 2:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r1, 0x36)
dup3(r0, r1, 0x0)

11:28:28 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

11:28:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000011})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0))
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000002c0))
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

11:28:28 executing program 1:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a85238810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd364111140f000027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ff858b68b0adf9deab3323aa9fdff52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581de796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a4940b4007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b540500880b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f65ac3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73750038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9209b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c0703000000000000c20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5ddff0016b62040bf8702ae12c76e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a7dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc000000000000000030e7922a92822e2bb7cba03d27afb1041da2421abf3e0c2d74cf6c8b9dba9123b8ee1b5e45c5d97322cef3b5fc89bd8f53e1a8f5806b967d9548a5bbfb2f0aaf730388df92988988ab165792dc7bee947c"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

[  858.643515][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
11:28:28 executing program 2:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r1, 0x36)
dup3(r0, r1, 0x0)

11:28:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone3(&(0x7f0000001680)={0x100942000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  858.794977][T18451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.862059][ T3931] Kernel panic - not syncing: panic_on_warn set ...
[  858.868699][ T3931] CPU: 0 PID: 3931 Comm: syz-executor.3 Tainted: G    B             5.9.0-rc2-next-20200825-syzkaller #0
[  858.879985][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  858.890433][ T3931] Call Trace:
[  858.893845][ T3931]  dump_stack+0x18f/0x20d
[  858.898218][ T3931]  ? task_work_run+0x90/0x190
[  858.902901][ T3931]  panic+0x2e3/0x75c
[  858.906816][ T3931]  ? __warn_printk+0xf3/0xf3
[  858.911639][ T3931]  ? preempt_schedule_common+0x59/0xc0
[  858.917421][ T3931]  ? task_work_run+0x116/0x190
[  858.922203][ T3931]  ? preempt_schedule_thunk+0x16/0x18
[  858.927610][ T3931]  ? trace_hardirqs_on+0x55/0x220
[  858.932641][ T3931]  ? task_work_run+0x116/0x190
[  858.937438][ T3931]  ? task_work_run+0x116/0x190
[  858.942233][ T3931]  end_report+0x4d/0x53
[  858.946761][ T3931]  kasan_report.cold+0xd/0x37
[  858.951487][ T3931]  ? task_work_run+0x116/0x190
[  858.956290][ T3931]  task_work_run+0x116/0x190
[  858.960901][ T3931]  exit_to_user_mode_prepare+0x195/0x1c0
[  858.966553][ T3931]  syscall_exit_to_user_mode+0x59/0x2b0
[  858.972570][ T3931]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  858.979083][ T3931] RIP: 0033:0x45d579
[  858.983112][ T3931] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  859.002753][ T3931] RSP: 002b:00007f39a4ed6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  859.012076][ T3931] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d579
[  859.020270][ T3931] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  859.028663][ T3931] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000
[  859.036650][ T3931] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000118cf4c
[  859.044638][ T3931] R13: 00007ffd0a6ddb4f R14: 00007f39a4ed79c0 R15: 000000000118cf4c
[  859.053819][ T3931] Kernel Offset: disabled
[  859.058167][ T3931] Rebooting in 86400 seconds..