326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r4 = dup(r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r5, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r6 = dup(r5) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000640)={{0x2, 0x1, 0x7fffffff, 0x1, 0xffffff3c}, 0xfff, 0x2207, 0x100000001}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x34, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x4}}]}, 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000009c0)=""/4096, &(0x7f00000006c0)=0x1000) 15:09:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x38}}, 0x0) 15:09:52 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x34, 0x7115}, 0x100) 15:09:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7300) [ 1611.170395][ T5963] input: syz1 as /devices/virtual/input/input2571 [ 1611.225602][ T5963] input: syz1 as /devices/virtual/input/input2570 15:09:52 executing program 4: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f0000000100)) [ 1611.283481][ T5971] input: syz1 as /devices/virtual/input/input2573 [ 1611.312113][ T5971] input: syz1 as /devices/virtual/input/input2572 15:09:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x34, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r4 = dup(r3) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000000)) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000040)=0x1) 15:09:52 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7400) 15:09:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1d0, 0x7115}, 0x100) [ 1611.563373][ T6014] input: syz1 as /devices/virtual/input/input2574 15:09:52 executing program 4: dup(0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1611.622762][ T6014] input: syz1 as /devices/virtual/input/input2575 15:09:52 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYBLOB="2e32e2970cf3726f3ffa23dc12bd00abb03d499ca61e74ae5ba4a9299df87302ec743ddea8a8d7959c3c8261f4f5fd97f904686fc05d1a5d2fc13dc8981eac42eef832805b3e6841f1cdfcea3791e0d55bb2c88359253d245748af65ffef19abaab1784afef707c13e3bbe8ace698f41b30cd31062184e16de9cb9267b2fab316a8495a4754d17f8c72e8e1a90919702cbaf3ca0002419db5d1b79740b3b45fe74be17e402c44300b05aa4e93238985f0d2a08a948bc4468c50998f5ed7b"], 0x38}}, 0x0) 15:09:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7500) 15:09:52 executing program 4: pipe2$9p(0x0, 0x800) finit_module(0xffffffffffffffff, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1f4, 0x7115}, 0x100) 15:09:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1611.994014][ T7828] net_ratelimit: 4 callbacks suppressed [ 1611.994023][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:53 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:53 executing program 0: pipe2$9p(0x0, 0x800) finit_module(0xffffffffffffffff, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX]) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000000)}, 0x4, &(0x7f0000000180)={&(0x7f0000000140)}}, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1612.156529][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7600) [ 1612.234209][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:53 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:53 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1612.484658][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7700) 15:09:53 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:53 executing program 4: pipe2$9p(0x0, 0x800) finit_module(0xffffffffffffffff, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:54 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7800) 15:09:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x240, 0x7115}, 0x100) 15:09:54 executing program 2: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1613.193871][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7900) 15:09:54 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x80047441, 0x0) 15:09:54 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:54 executing program 2: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 15:09:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x244, 0x7115}, 0x100) [ 1613.523082][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.533052][ T231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.543544][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.553218][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:54 executing program 2: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 15:09:54 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:54 executing program 4: pipe2$9p(0x0, 0x800) finit_module(0xffffffffffffffff, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:54 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000080)={0x0, 0x0}) 15:09:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7a00) 15:09:55 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:09:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x3e8, 0x7115}, 0x100) 15:09:55 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7b00) 15:09:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf2, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:09:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x108, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c04829"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1614.243784][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x500, 0x7115}, 0x100) 15:09:55 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7c00) 15:09:55 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 15:09:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 15:09:55 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7d00) 15:09:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x570, 0x7115}, 0x100) 15:09:55 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6(0xa, 0x1, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x134, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8", 0x1}], 0x3, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:09:58 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4004743b, &(0x7f0000000080)={0x0, 0x0}) 15:09:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x138, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="c8bf", 0x2}], 0x3, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:09:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x20000) 15:09:58 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x700, 0x7115}, 0x100) [ 1617.362642][T25604] net_ratelimit: 7 callbacks suppressed [ 1617.362651][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1000000) 15:09:58 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4004743b, 0x0) 15:09:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) prlimit64(0x0, 0x0, 0x0, &(0x7f00000000c0)) 15:09:58 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2000000) 15:09:58 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1617.753671][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x8}) 15:09:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x910, 0x7115}, 0x100) 15:09:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x9}) 15:09:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x38}]}}}, @IFLA_MASTER={0x8}, @IFLA_BROADCAST={0xa}]}, 0x64}}, 0x0) 15:09:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3000000) [ 1618.073377][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x38}]}}}, @IFLA_MASTER={0x8}, @IFLA_BROADCAST={0xa}]}, 0x64}}, 0x0) 15:09:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x9}) 15:09:59 executing program 3: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf1, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1618.317570][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:59 executing program 3: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4000000) 15:09:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x38}]}}}, @IFLA_MASTER={0x8}, @IFLA_BROADCAST={0xa}]}, 0x64}}, 0x0) [ 1618.393817][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xc00, 0x7115}, 0x100) 15:09:59 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodecompose='nodecompose'}]}) 15:09:59 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0) [ 1618.525800][ T6488] syz-executor.0 (6488) used obsolete PPPIOCDETACH ioctl [ 1618.561336][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:09:59 executing program 3: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:09:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1618.634384][T32492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.646057][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.656233][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.656475][ T6493] hfsplus: unable to find HFS+ superblock 15:09:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5000000) 15:09:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe00, 0x7115}, 0x100) 15:09:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r3, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x38}]}}}, @IFLA_MASTER={0x8}, @IFLA_BROADCAST={0xa}]}, 0x64}}, 0x0) 15:09:59 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40047451, &(0x7f0000000080)={0x4, &(0x7f00000000c0)=[{}]}) [ 1618.785448][ T6493] hfsplus: unable to find HFS+ superblock 15:09:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x54, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) 15:09:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1619.047030][ T6548] tipc: Started in network mode 15:10:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x8}) 15:10:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6000000) [ 1619.078106][ T6548] tipc: Own node identity e0000001, cluster identity 4711 [ 1619.113440][ T6548] tipc: Enabling of bearer rejected, failed to enable media 15:10:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x125, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:10:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1009, 0x7115}, 0x100) 15:10:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 15:10:00 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40047451, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{}]}) 15:10:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1619.443691][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7000000) 15:10:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) 15:10:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1800, 0x7115}, 0x100) 15:10:00 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x40) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 15:10:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x8000000) 15:10:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15d, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:10:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 15:10:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2080, 0x7115}, 0x100) 15:10:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x138, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c9355c44ecc86597e12c337a9a5335557abe71f3761d77294e0879a4f6029a249635418"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:10:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x9000000) 15:10:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xa000000) [ 1622.553662][T25971] net_ratelimit: 8 callbacks suppressed [ 1622.553671][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2400, 0x7115}, 0x100) [ 1622.792962][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.602924][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.842924][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.153094][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.318621][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.328348][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.347096][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.393151][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.632648][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x94}]}) 15:10:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xb000000) 15:10:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2800, 0x7115}, 0x100) 15:10:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a0, &(0x7f00000003c0)="c4fe910c6786ce2278db53a1e7ba3cef00dd444e0735e43eb95f6a78e0f25b446e11176aba0617b927c9589b2b1a3bc9a1fef212cca272096d523173440f1ab57b7d5ad152631946fe5a6bbb79029ec19c02f49d6959fdb8cfa543836f72de8df1346d8384e900f9af861e41c3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a12bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c9355c44ecc86597e12c337a9a5335557abe71f3761d77294e0879a4f6029a2496354181802027994e44fdfecc6e9c842f10267c94b43085dfee050115b71bcc07fcd89f0ecb0e0cbd38255b6b76808c68cf7214ec9d0289cecc2e2444bbbdb444bd2c1c7ef2d1b04b28008aa099e1818a16e0fd740ea2d514065f57b352ac8d256f532ba5925bc1046a2f8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:10:06 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 15:10:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x3400, 0x7115}, 0x100) 15:10:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xc000000) 15:10:06 executing program 4: 15:10:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:07 executing program 4: 15:10:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3e) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4000, 0x7115}, 0x100) 15:10:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@discard='discard'}, {@discard_size={'discard'}}]}) 15:10:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xd000000) 15:10:08 executing program 4: 15:10:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4002, 0x7115}, 0x100) 15:10:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 15:10:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1627.764924][ T8954] net_ratelimit: 7 callbacks suppressed [ 1627.764934][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:08 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) semop(0x0, &(0x7f0000000100), 0x2d) semtimedop(0x0, &(0x7f0000000040), 0x1b9, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) 15:10:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4402, 0x7115}, 0x100) 15:10:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xe000000) 15:10:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:09 executing program 0: 15:10:09 executing program 4: 15:10:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:09 executing program 0: [ 1628.154842][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:09 executing program 4: 15:10:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xf000000) 15:10:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x7005, 0x7115}, 0x100) 15:10:09 executing program 0: 15:10:09 executing program 4: 15:10:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x840) r1 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:09 executing program 0: 15:10:09 executing program 4: [ 1628.554613][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xd001, 0x7115}, 0x100) 15:10:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x10000000) 15:10:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:09 executing program 4: 15:10:09 executing program 0: [ 1628.812253][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:09 executing program 4: 15:10:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:09 executing program 0: 15:10:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe803, 0x7115}, 0x100) 15:10:10 executing program 0: 15:10:10 executing program 4: 15:10:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x11000000) 15:10:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:10 executing program 0: 15:10:10 executing program 4: 15:10:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="05002f51b0f754d0b67ac283cf17000000000000050b000000000000010000000000000083000040000000000800000000000000b60a0000000000000600000000000000bc09000000000000ff03000000000000ab090000"]) r1 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:10 executing program 0: 15:10:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x12000000) 15:10:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xf401, 0x7115}, 0x100) 15:10:10 executing program 4: 15:10:10 executing program 0: 15:10:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4) r1 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1629.592391][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:10 executing program 4: 15:10:10 executing program 0: 15:10:10 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:10 executing program 4: 15:10:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x13000000) [ 1629.843803][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:10 executing program 0: 15:10:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x20000, 0x7115}, 0x100) 15:10:11 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:11 executing program 4: 15:10:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1630.072897][ T231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.083670][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:11 executing program 0: 15:10:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) [ 1630.128001][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x14000000) 15:10:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:11 executing program 4: 15:10:11 executing program 0: [ 1630.232181][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x50000, 0x7115}, 0x100) 15:10:11 executing program 0: 15:10:11 executing program 4: 15:10:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:11 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x15000000) 15:10:11 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:11 executing program 4: 15:10:11 executing program 0: 15:10:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xf0ff7f, 0x7115}, 0x100) 15:10:11 executing program 0: 15:10:11 executing program 4: 15:10:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x16000000) 15:10:11 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:12 executing program 0: 15:10:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:12 executing program 4: 15:10:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1000000, 0x7115}, 0x100) 15:10:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x17000000) 15:10:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:12 executing program 4: 15:10:12 executing program 0: 15:10:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2000000, 0x7115}, 0x100) 15:10:12 executing program 0: 15:10:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x18000000) 15:10:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:12 executing program 4: 15:10:12 executing program 3: 15:10:12 executing program 0: 15:10:12 executing program 4: 15:10:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4000000, 0x7115}, 0x100) 15:10:12 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:12 executing program 3: 15:10:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x19000000) 15:10:12 executing program 0: 15:10:12 executing program 4: 15:10:13 executing program 3: 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x7000000, 0x7115}, 0x100) 15:10:13 executing program 0: 15:10:13 executing program 4: 15:10:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1a000000) 15:10:13 executing program 3: 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:13 executing program 0: 15:10:13 executing program 4: 15:10:13 executing program 3: 15:10:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xc000000, 0x7115}, 0x100) 15:10:13 executing program 0: 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:13 executing program 4: 15:10:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1b000000) 15:10:13 executing program 0: 15:10:13 executing program 3: 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:13 executing program 4: 15:10:13 executing program 0: 15:10:13 executing program 3: 15:10:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe000000, 0x7115}, 0x100) 15:10:13 executing program 4: 15:10:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1c000000) 15:10:13 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, 0x0, 0x0) 15:10:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000523a4abd32b8018007a0300fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) 15:10:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) [ 1632.952276][T25604] net_ratelimit: 6 callbacks suppressed [ 1632.952285][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0300fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) 15:10:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1d000000) 15:10:14 executing program 0: 15:10:14 executing program 3: 15:10:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x10090000, 0x7115}, 0x100) 15:10:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe000000, 0x7115}, 0x100) 15:10:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) 15:10:14 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1633.281894][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:14 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='P', 0x1, 0x0, 0x0, 0x0) [ 1633.512574][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:14 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x18000000, 0x7115}, 0x100) 15:10:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe000000, 0x7115}, 0x100) 15:10:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1e000000) 15:10:14 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:10:14 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe000000, 0x7115}, 0x100) 15:10:14 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1f000000) [ 1634.005979][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:15 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x24000000, 0x7115}, 0x100) 15:10:15 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0x3400000000000000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) [ 1634.322954][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:15 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x28000000, 0x7115}, 0x100) 15:10:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x20000000) 15:10:15 executing program 2: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0x3400000000000000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x34000000, 0x7115}, 0x100) 15:10:15 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0xf0ffffff7f0000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:15 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x21000000) 15:10:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0x3400000000000000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:16 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0xf0ffffff7f0000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x40000000, 0x7115}, 0x100) [ 1635.031904][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:16 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x22000000) 15:10:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0xf0ffffff7f0000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x40020000, 0x7115}, 0x100) [ 1635.351807][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:16 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x23000000) 15:10:16 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0x700}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:16 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x44020000, 0x7115}, 0x100) 15:10:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x24000000) 15:10:16 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0x3e8}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) [ 1636.073912][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x70050000, 0x7115}, 0x100) 15:10:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x25000000) 15:10:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:17 executing program 0: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1636.312418][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.391510][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x26000000) 15:10:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x7ffff000, 0x7115}, 0x100) 15:10:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 3: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x27000000) 15:10:17 executing program 3: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:17 executing program 0: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x80200000, 0x7115}, 0x100) 15:10:18 executing program 3: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 0: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x28000000) 15:10:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xd0010000, 0x7115}, 0x100) 15:10:18 executing program 0: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x29000000) 15:10:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe8030000, 0x7115}, 0x100) 15:10:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2a000000) 15:10:18 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:18 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xf4010000, 0x7115}, 0x100) 15:10:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2b000000) 15:10:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1638.162751][T25971] net_ratelimit: 4 callbacks suppressed [ 1638.162760][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xffffff7f, 0x7115}, 0x100) 15:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 4: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2c000000) [ 1638.471781][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 4: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x208000000000, 0x7115}, 0x100) 15:10:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2d000000) 15:10:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 4: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 4: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x7ffffffff000, 0x7115}, 0x100) 15:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 4: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2e000000) [ 1639.191289][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 4: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) [ 1639.351369][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2000000000000, 0x7115}, 0x100) 15:10:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1639.512984][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2f000000) 15:10:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) [ 1639.592721][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x5000000000000, 0x7115}, 0x100) 15:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x30000000) 15:10:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1640.231100][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xf0ff7f00000000, 0x7115}, 0x100) 15:10:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x31000000) [ 1640.314824][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) [ 1640.553152][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 2: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x32000000) 15:10:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xf0ffffff7f0000, 0x7115}, 0x100) 15:10:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 2: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x33000000) 15:10:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 2: r0 = syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x100000000000000, 0x7115}, 0x100) 15:10:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x34000000) 15:10:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1641.282052][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x200000000000000, 0x7115}, 0x100) 15:10:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x35000000) 15:10:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x400000000000000, 0x7115}, 0x100) 15:10:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x36000000) 15:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x700000000000000, 0x7115}, 0x100) 15:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x37000000) 15:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xc00000000000000, 0x7115}, 0x100) 15:10:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x38000000) 15:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe00000000000000, 0x7115}, 0x100) 15:10:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x39000000) 15:10:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1009000000000000, 0x7115}, 0x100) 15:10:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x1800000000000000, 0x7115}, 0x100) 15:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3a000000) [ 1643.364761][T25604] net_ratelimit: 5 callbacks suppressed [ 1643.364770][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:24 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3b000000) 15:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2400000000000000, 0x7115}, 0x100) 15:10:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) [ 1643.671996][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:24 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x2800000000000000, 0x7115}, 0x100) 15:10:25 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3c000000) 15:10:25 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:25 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3d000000) 15:10:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x3400000000000000, 0x7115}, 0x100) 15:10:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 1644.391952][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.401275][ T231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.411078][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.429985][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3e000000) 15:10:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:10:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4000000000000000, 0x7115}, 0x100) [ 1644.720769][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:10:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x3f000000) 15:10:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:10:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4002000000000000, 0x7115}, 0x100) 15:10:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 15:10:26 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x40000000) 15:10:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 15:10:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x4402000000000000, 0x7115}, 0x100) 15:10:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) [ 1645.432169][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:26 executing program 3: ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1645.525163][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0, 0x24}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 15:10:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x41000000) [ 1645.671433][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:26 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22181}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r3, 0x10001) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xc02) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x137143893ddcaf61, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x0, 'bond0\x00', {0x4}, 0xffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x300, @loopback}], 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) 15:10:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x7005000000000000, 0x7115}, 0x100) 15:10:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 15:10:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1645.877529][ T8362] input: syz1 as /devices/virtual/input/input2576 15:10:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x2080, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x42000000) 15:10:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 15:10:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xd001000000000000, 0x7115}, 0x100) 15:10:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x43000000) 15:10:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xe803000000000000, 0x7115}, 0x100) 15:10:27 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x570, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xf401000000000000, 0x7115}, 0x100) 15:10:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x44000000) 15:10:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x45000000) 15:10:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0xffffff7f00000000, 0x7115}, 0x100) [ 1647.086892][ T8445] FAULT_INJECTION: forcing a failure. [ 1647.086892][ T8445] name failslab, interval 1, probability 0, space 0, times 0 15:10:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1647.163052][ T8445] CPU: 0 PID: 8445 Comm: syz-executor.3 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1647.172548][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.182615][ T8445] Call Trace: [ 1647.185929][ T8445] dump_stack+0x18f/0x20d [ 1647.190286][ T8445] should_fail.cold+0x5/0x14 [ 1647.194903][ T8445] ? rw_copy_check_uvector+0x311/0x390 [ 1647.200381][ T8445] should_failslab+0x5/0xf [ 1647.204816][ T8445] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1647.210905][ T8445] __kmalloc+0x6f/0x320 [ 1647.215083][ T8445] rw_copy_check_uvector+0x311/0x390 [ 1647.220450][ T8445] import_iovec+0xa6/0x3d0 [ 1647.224892][ T8445] ? import_single_range+0x3a0/0x3a0 [ 1647.230240][ T8445] ? ktime_get+0x3e/0x120 [ 1647.234600][ T8445] vfs_readv+0xbb/0x150 [ 1647.238778][ T8445] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1647.244858][ T8445] ? __fget_files+0x272/0x400 [ 1647.249556][ T8445] ? lock_downgrade+0x830/0x830 [ 1647.254425][ T8445] ? read_seqcount_t_begin.constprop.0+0x139/0x1f0 [ 1647.260947][ T8445] ? ktime_get+0xd8/0x120 [ 1647.265356][ T8445] ? native_apic_msr_write+0x54/0x80 [ 1647.270670][ T8445] ? __fget_files+0x294/0x400 [ 1647.275368][ T8445] __x64_sys_preadv+0x231/0x310 [ 1647.280235][ T8445] ? __ia32_sys_writev+0xb0/0xb0 [ 1647.285193][ T8445] ? trace_hardirqs_on+0x5f/0x220 [ 1647.290236][ T8445] ? lockdep_hardirqs_on+0x76/0xf0 [ 1647.295374][ T8445] do_syscall_64+0x2d/0x70 [ 1647.299814][ T8445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1647.305717][ T8445] RIP: 0033:0x45d239 [ 1647.309631][ T8445] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1647.329243][ T8445] RSP: 002b:00007fc1857e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1647.337680][ T8445] RAX: ffffffffffffffda RBX: 0000000000024ac0 RCX: 000000000045d239 [ 1647.345667][ T8445] RDX: 0000000000000060 RSI: 00000000200017c0 RDI: 0000000000000003 [ 1647.353658][ T8445] RBP: 00007fc1857e6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.361647][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.369635][ T8445] R13: 00007ffc9b7b585f R14: 00007fc1857e79c0 R15: 000000000118cf4c 15:10:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x713e}, 0x100) 15:10:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x46000000) 15:10:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:28 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1647.883242][ T8498] FAULT_INJECTION: forcing a failure. [ 1647.883242][ T8498] name failslab, interval 1, probability 0, space 0, times 0 15:10:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2, 0x0, 0x0) 15:10:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x47000000) [ 1647.981348][ T8498] CPU: 0 PID: 8498 Comm: syz-executor.0 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1647.990845][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.000912][ T8498] Call Trace: [ 1648.004227][ T8498] dump_stack+0x18f/0x20d [ 1648.008581][ T8498] should_fail.cold+0x5/0x14 [ 1648.013286][ T8498] ? rw_copy_check_uvector+0x311/0x390 [ 1648.018781][ T8498] should_failslab+0x5/0xf [ 1648.023228][ T8498] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 15:10:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) [ 1648.029313][ T8498] __kmalloc+0x6f/0x320 [ 1648.033495][ T8498] rw_copy_check_uvector+0x311/0x390 [ 1648.038804][ T8498] import_iovec+0xa6/0x3d0 [ 1648.043246][ T8498] ? import_single_range+0x3a0/0x3a0 [ 1648.048570][ T8498] ? delayed_put_pid+0x30/0x30 [ 1648.053353][ T8498] ? find_held_lock+0x2d/0x110 [ 1648.058147][ T8498] vfs_readv+0xbb/0x150 [ 1648.062321][ T8498] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1648.068401][ T8498] ? __fget_files+0x272/0x400 [ 1648.073117][ T8498] ? lock_downgrade+0x830/0x830 15:10:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3, 0x0, 0x0) [ 1648.077989][ T8498] ? lock_downgrade+0x830/0x830 [ 1648.082865][ T8498] ? __fget_files+0x294/0x400 [ 1648.087575][ T8498] __x64_sys_preadv+0x231/0x310 [ 1648.092443][ T8498] ? __ia32_sys_writev+0xb0/0xb0 [ 1648.097587][ T8498] ? trace_hardirqs_on+0x5f/0x220 [ 1648.102632][ T8498] ? lockdep_hardirqs_on+0x76/0xf0 [ 1648.107767][ T8498] do_syscall_64+0x2d/0x70 [ 1648.112204][ T8498] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1648.118196][ T8498] RIP: 0033:0x45d239 15:10:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4, 0x0, 0x0) [ 1648.122116][ T8498] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1648.141730][ T8498] RSP: 002b:00007f3047665c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1648.151205][ T8498] RAX: ffffffffffffffda RBX: 0000000000024ac0 RCX: 000000000045d239 [ 1648.159188][ T8498] RDX: 0000000000000060 RSI: 00000000200017c0 RDI: 0000000000000003 [ 1648.167173][ T8498] RBP: 00007f3047665ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.175160][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.183147][ T8498] R13: 00007fff4e37fd0f R14: 00007f30476669c0 R15: 000000000118cf4c 15:10:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x4) 15:10:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) [ 1648.471112][ T8483] net_ratelimit: 138 callbacks suppressed [ 1648.471122][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:29 executing program 0 (fault-call:3 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x48000000) 15:10:29 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x6, 0x0, 0x0) 15:10:29 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x102) [ 1648.635671][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:29 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1648.711405][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.740799][ T8563] FAULT_INJECTION: forcing a failure. [ 1648.740799][ T8563] name failslab, interval 1, probability 0, space 0, times 0 15:10:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x49000000) [ 1648.838527][ T8563] CPU: 0 PID: 8563 Comm: syz-executor.0 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1648.848022][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.858101][ T8563] Call Trace: [ 1648.862440][ T8563] dump_stack+0x18f/0x20d [ 1648.866799][ T8563] should_fail.cold+0x5/0x14 [ 1648.871413][ T8563] should_failslab+0x5/0xf [ 1648.875847][ T8563] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1648.882081][ T8563] kmem_cache_alloc_node_trace+0x59/0x400 [ 1648.887837][ T8563] ? kvm_sched_clock_read+0x14/0x40 [ 1648.893230][ T8563] __kmalloc_node+0x38/0x60 [ 1648.897812][ T8563] kvmalloc_node+0x61/0xf0 [ 1648.902247][ T8563] seq_read+0x743/0x1070 [ 1648.906504][ T8563] ? lockdep_hardirqs_on+0x76/0xf0 [ 1648.911924][ T8563] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1648.918958][ T8563] ? seq_hex_dump+0x440/0x440 [ 1648.923741][ T8563] proc_reg_read+0x221/0x300 [ 1648.928356][ T8563] do_iter_read+0x48e/0x6e0 [ 1648.932892][ T8563] vfs_readv+0xe5/0x150 [ 1648.937071][ T8563] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1648.943154][ T8563] ? __fget_files+0x272/0x400 [ 1648.947855][ T8563] ? trace_hardirqs_on+0x5f/0x220 [ 1648.952899][ T8563] ? lockdep_hardirqs_on+0x76/0xf0 [ 1648.958041][ T8563] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1648.964227][ T8563] ? __fget_light+0xe1/0x280 [ 1648.968913][ T8563] ? __sanitizer_cov_trace_pc+0x10/0x60 [ 1648.974580][ T8563] __x64_sys_preadv+0x231/0x310 [ 1648.979463][ T8563] ? __ia32_sys_writev+0xb0/0xb0 [ 1648.985305][ T8563] ? trace_hardirqs_on+0x5f/0x220 [ 1648.990346][ T8563] ? lockdep_hardirqs_on+0x76/0xf0 [ 1648.995973][ T8563] do_syscall_64+0x2d/0x70 [ 1649.000415][ T8563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1649.007073][ T8563] RIP: 0033:0x45d239 [ 1649.010981][ T8563] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1649.030991][ T8563] RSP: 002b:00007f3047665c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1649.040443][ T8563] RAX: ffffffffffffffda RBX: 0000000000024ac0 RCX: 000000000045d239 [ 1649.048428][ T8563] RDX: 0000000000000060 RSI: 00000000200017c0 RDI: 0000000000000003 [ 1649.056412][ T8563] RBP: 00007f3047665ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.065339][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.073325][ T8563] R13: 00007fff4e37fd0f R14: 00007f30476669c0 R15: 000000000118cf4c 15:10:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x7, 0x0, 0x0) [ 1649.094102][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x104) 15:10:30 executing program 0 (fault-call:3 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4a000000) 15:10:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x8, 0x0, 0x0) 15:10:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x168, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x168}}, 0x0) 15:10:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 15:10:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x107) 15:10:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4b000000) 15:10:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x9, 0x0, 0x0) 15:10:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:10:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 1649.680252][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x10c) 15:10:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xa, 0x0, 0x0) 15:10:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2, 0x0, 0x0) 15:10:30 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:10:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4c000000) 15:10:30 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) [ 1649.911836][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3, 0x0, 0x0) 15:10:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xb, 0x0, 0x0) [ 1650.057930][ T8660] FAULT_INJECTION: forcing a failure. [ 1650.057930][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.144568][ T8660] CPU: 1 PID: 8660 Comm: syz-executor.2 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1650.154076][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.165881][ T8660] Call Trace: [ 1650.169190][ T8660] dump_stack+0x18f/0x20d [ 1650.173541][ T8660] should_fail.cold+0x5/0x14 [ 1650.178159][ T8660] ? rw_copy_check_uvector+0x311/0x390 [ 1650.183637][ T8660] should_failslab+0x5/0xf [ 1650.188080][ T8660] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1650.194170][ T8660] __kmalloc+0x6f/0x320 [ 1650.198359][ T8660] rw_copy_check_uvector+0x311/0x390 [ 1650.204804][ T8660] import_iovec+0xa6/0x3d0 [ 1650.209243][ T8660] ? import_single_range+0x3a0/0x3a0 [ 1650.214545][ T8660] ? delayed_put_pid+0x30/0x30 [ 1650.219420][ T8660] ? find_held_lock+0x2d/0x110 [ 1650.224210][ T8660] vfs_readv+0xbb/0x150 [ 1650.228396][ T8660] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1650.234484][ T8660] ? __fget_files+0x272/0x400 [ 1650.239188][ T8660] ? lock_downgrade+0x830/0x830 [ 1650.244060][ T8660] ? lock_downgrade+0x830/0x830 [ 1650.248946][ T8660] ? __fget_files+0x294/0x400 [ 1650.253656][ T8660] __x64_sys_preadv+0x231/0x310 [ 1650.258548][ T8660] ? __ia32_sys_writev+0xb0/0xb0 [ 1650.263509][ T8660] ? trace_hardirqs_on+0x5f/0x220 [ 1650.268550][ T8660] ? lockdep_hardirqs_on+0x76/0xf0 [ 1650.274381][ T8660] do_syscall_64+0x2d/0x70 [ 1650.278818][ T8660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1650.284719][ T8660] RIP: 0033:0x45d239 [ 1650.288626][ T8660] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.308239][ T8660] RSP: 002b:00007f3f2c28bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1650.316675][ T8660] RAX: ffffffffffffffda RBX: 0000000000024ac0 RCX: 000000000045d239 [ 1650.324664][ T8660] RDX: 0000000000000060 RSI: 00000000200017c0 RDI: 0000000000000003 [ 1650.332647][ T8660] RBP: 00007f3f2c28bca0 R08: 0000000000000000 R09: 0000000000000000 15:10:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:10:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x10e) 15:10:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x118) [ 1650.340648][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.348630][ T8660] R13: 00007ffefd14c66f R14: 00007f3f2c28c9c0 R15: 000000000118cf4c 15:10:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x160, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x130, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x160}}, 0x0) [ 1650.389405][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4d000000) 15:10:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4, 0x0, 0x0) 15:10:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xc, 0x0, 0x0) 15:10:31 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x2c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}]}}]}, 0x5c}}, 0x0) 15:10:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x124) [ 1650.710071][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) 15:10:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xd, 0x0, 0x0) 15:10:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x2c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}]}}]}, 0x5c}}, 0x0) 15:10:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4e000000) 15:10:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x2c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xefc7}]}}]}, 0x5c}}, 0x0) 15:10:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xe, 0x0, 0x0) 15:10:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x128) 15:10:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x6, 0x0, 0x0) 15:10:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2, 0x0, 0x0) 15:10:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x158, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x128, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xc, 0x1, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x158}}, 0x0) 15:10:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x4f000000) 15:10:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x7, 0x0, 0x0) 15:10:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xf, 0x0, 0x0) 15:10:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3, 0x0, 0x0) [ 1651.447497][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.510129][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x40, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x148}}, 0x0) 15:10:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x134) 15:10:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x8, 0x0, 0x0) 15:10:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x50000000) 15:10:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x10, 0x0, 0x0) 15:10:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4, 0x0, 0x0) 15:10:32 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x9, 0x0, 0x0) 15:10:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) 15:10:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x300) 15:10:32 executing program 4 (fault-call:4 fault-nth:0): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x51000000) 15:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) 15:10:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xa, 0x0, 0x0) [ 1652.028615][ T8807] FAULT_INJECTION: forcing a failure. [ 1652.028615][ T8807] name failslab, interval 1, probability 0, space 0, times 0 15:10:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x12, 0x0, 0x0) [ 1652.114487][ T8807] CPU: 1 PID: 8807 Comm: syz-executor.4 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1652.123989][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.134059][ T8807] Call Trace: [ 1652.137373][ T8807] dump_stack+0x18f/0x20d [ 1652.141725][ T8807] should_fail.cold+0x5/0x14 [ 1652.146334][ T8807] should_failslab+0x5/0xf [ 1652.150772][ T8807] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1652.156869][ T8807] kmem_cache_alloc_node+0x53/0x3f0 15:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x6, 0x0, 0x0) [ 1652.162098][ T8807] __alloc_skb+0x71/0x550 [ 1652.166543][ T8807] netlink_sendmsg+0x94f/0xd90 [ 1652.171337][ T8807] ? netlink_unicast+0x7d0/0x7d0 [ 1652.176301][ T8807] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1652.181619][ T8807] ? netlink_unicast+0x7d0/0x7d0 [ 1652.186596][ T8807] sock_sendmsg+0xcf/0x120 [ 1652.191291][ T8807] ____sys_sendmsg+0x6e8/0x810 [ 1652.196097][ T8807] ? kernel_sendmsg+0x50/0x50 [ 1652.200795][ T8807] ? do_recvmmsg+0x6d0/0x6d0 [ 1652.205400][ T8807] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1652.211414][ T8807] ? lock_downgrade+0x830/0x830 [ 1652.216287][ T8807] ? _parse_integer+0x132/0x180 [ 1652.221163][ T8807] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1652.227167][ T8807] ___sys_sendmsg+0xf3/0x170 [ 1652.231864][ T8807] ? sendmsg_copy_msghdr+0x160/0x160 [ 1652.237167][ T8807] ? __fget_files+0x272/0x400 [ 1652.241865][ T8807] ? lock_downgrade+0x830/0x830 [ 1652.246730][ T8807] ? find_held_lock+0x2d/0x110 [ 1652.251507][ T8807] ? ksys_write+0x212/0x250 [ 1652.256045][ T8807] ? __fget_files+0x294/0x400 15:10:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x13, 0x0, 0x0) [ 1652.260748][ T8807] ? __fget_light+0xea/0x280 [ 1652.265493][ T8807] __sys_sendmsg+0xe5/0x1b0 [ 1652.270010][ T8807] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1652.275058][ T8807] ? trace_hardirqs_on+0x5f/0x220 [ 1652.280092][ T8807] ? lockdep_hardirqs_on+0x76/0xf0 [ 1652.285218][ T8807] do_syscall_64+0x2d/0x70 [ 1652.289647][ T8807] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1652.295542][ T8807] RIP: 0033:0x45d239 15:10:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x14, 0x0, 0x0) [ 1652.299445][ T8807] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1652.319058][ T8807] RSP: 002b:00007f051a647c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1652.327490][ T8807] RAX: ffffffffffffffda RBX: 000000000002c100 RCX: 000000000045d239 [ 1652.335477][ T8807] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 1652.343463][ T8807] RBP: 00007f051a647ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.351446][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 15:10:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xb, 0x0, 0x0) [ 1652.359430][ T8807] R13: 00007ffcd7146d1f R14: 00007f051a6489c0 R15: 000000000118cf4c 15:10:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x500) 15:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x7, 0x0, 0x0) 15:10:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xc, 0x0, 0x0) 15:10:33 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x52000000) 15:10:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x15, 0x0, 0x0) 15:10:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x700) 15:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x8, 0x0, 0x0) 15:10:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xd, 0x0, 0x0) 15:10:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x16, 0x0, 0x0) 15:10:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xe, 0x0, 0x0) 15:10:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x9, 0x0, 0x0) 15:10:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x53000000) 15:10:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x813) 15:10:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x17, 0x0, 0x0) 15:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xa, 0x0, 0x0) 15:10:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x2, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xf, 0x0, 0x0) 15:10:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x54000000) 15:10:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x3f00) 15:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xb, 0x0, 0x0) [ 1653.528029][ T8954] net_ratelimit: 4 callbacks suppressed [ 1653.528039][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x18, 0x0, 0x0) 15:10:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x10, 0x0, 0x0) 15:10:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xc, 0x0, 0x0) 15:10:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) 15:10:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19, 0x0, 0x0) 15:10:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x7818) 15:10:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x55000000) [ 1653.830687][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xd, 0x0, 0x0) 15:10:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x12, 0x0, 0x0) 15:10:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a, 0x0, 0x0) 15:10:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0xa00d) 15:10:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x56000000) 15:10:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xe, 0x0, 0x0) 15:10:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x13, 0x0, 0x0) 15:10:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b, 0x0, 0x0) 15:10:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x57000000) 15:10:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xf, 0x0, 0x0) 15:10:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0xb81f) 15:10:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x14, 0x0, 0x0) 15:10:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c, 0x0, 0x0) [ 1654.561688][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.590241][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x10, 0x0, 0x0) 15:10:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x15, 0x0, 0x0) 15:10:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x58000000) 15:10:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d, 0x0, 0x0) [ 1654.789858][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0xe014) 15:10:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) [ 1654.869913][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xa, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x16, 0x0, 0x0) 15:10:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e, 0x0, 0x0) 15:10:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x59000000) 15:10:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xb, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0xe81d) 15:10:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x17, 0x0, 0x0) 15:10:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x12, 0x0, 0x0) 15:10:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21, 0x0, 0x0) 15:10:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x18, 0x0, 0x0) 15:10:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x13, 0x0, 0x0) 15:10:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x22, 0x0, 0x0) 15:10:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5a000000) 15:10:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x14, 0x0, 0x0) 15:10:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1655.602082][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19, 0x0, 0x0) 15:10:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x80f40000) 15:10:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x23, 0x0, 0x0) 15:10:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5b000000) 15:10:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x11, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x15, 0x0, 0x0) 15:10:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a, 0x0, 0x0) [ 1655.912096][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x24, 0x0, 0x0) 15:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x16, 0x0, 0x0) 15:10:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5c000000) 15:10:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x12, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b, 0x0, 0x0) 15:10:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x67, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x5, 0x3f, {0x9, 0x21, 0x7f, 0xff, 0x1, {0x22, 0x99a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x1, 0x0, 0x40, 0x40}, 0xf0, &(0x7f0000000640)={0x5, 0xf, 0xf0, 0x5, [@generic={0xae, 0x10, 0x7, "55358becf879c6389b26bef44ff77c5b26bc60a232ffcd860389e55f2417acc93facf36443b8e675a9131d5c32636fdbea9f9fab4d0e08d26b49b97efa32ce3fbc45ea505a68c36f50b6827bd165c4d938de48cac622fcd9366ca575235bad716ae50b778460cb502115c7af266ea8eff583f9511d60ee6b7eded4697697727cb91d3da871d23bd8c3552d09ad90d3a14c374ca4e2323cad0422122240fc9d28f0965e9c4a06f8ec4aa592"}, @ss_container_id={0x14, 0x10, 0x4, 0xd3, "c840792b7a770f0268609b485366ff04"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x3f, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f4a24b5e6ed842523e461c8e6da9a643"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x14, 0xb4, 0x9, 0x8}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080)=0x7, 0x4) 15:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x17, 0x0, 0x0) 15:10:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x13, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x25, 0x0, 0x0) 15:10:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c, 0x0, 0x0) 15:10:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5d000000) [ 1656.485818][ T9195] input: syz1 as /devices/virtual/input/input2577 15:10:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x18, 0x0, 0x0) 15:10:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x26, 0x0, 0x0) 15:10:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d, 0x0, 0x0) [ 1656.636034][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5e000000) 15:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19, 0x0, 0x0) [ 1656.958905][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000300)=0xed, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x5ef9125897c97b0a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xfffffffb}}, @NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c047}, 0x4c814) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) r4 = dup(r3) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000200)=0x7fffffff) 15:10:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e, 0x0, 0x0) 15:10:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x104, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x27, 0x0, 0x0) 15:10:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a, 0x0, 0x0) 15:10:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x5f000000) 15:10:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21, 0x0, 0x0) 15:10:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x28, 0x0, 0x0) 15:10:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b, 0x0, 0x0) 15:10:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x60000000) [ 1657.351170][ T9270] input: syz1 as /devices/virtual/input/input2578 15:10:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c, 0x0, 0x0) 15:10:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0xba, 0x2, 0x20, 0x3f, 0x0, 0x8, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x1019, 0x0, 0x9, 0x7, 0x1, 0xb5e, 0x100}, r1, 0x9, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000140), &(0x7f0000000180)=""/51, 0x33}) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x22, 0x0, 0x0) 15:10:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x29, 0x0, 0x0) 15:10:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d, 0x0, 0x0) 15:10:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x61000000) 15:10:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x23, 0x0, 0x0) 15:10:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x600, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2a, 0x0, 0x0) 15:10:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e, 0x0, 0x0) 15:10:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x612, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2b, 0x0, 0x0) 15:10:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x24, 0x0, 0x0) 15:10:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x62000000) 15:10:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x900, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21, 0x0, 0x0) 15:10:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2c, 0x0, 0x0) 15:10:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x25, 0x0, 0x0) 15:10:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1658.387959][ T9364] input: syz1 as /devices/virtual/input/input2579 15:10:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x22, 0x0, 0x0) 15:10:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2d, 0x0, 0x0) 15:10:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x26, 0x0, 0x0) 15:10:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x63000000) [ 1658.504538][ T9382] input: syz1 as /devices/virtual/input/input2580 15:10:39 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24025f68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198a5b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bd1e68e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x454a9076}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54f7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dbde554}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7de993a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d0caa46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38cdc05d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c301f29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5511ba06}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd94482}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x841}, 0x44090) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xb00, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x23, 0x0, 0x0) 15:10:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2e, 0x0, 0x0) 15:10:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x27, 0x0, 0x0) [ 1658.716023][ T8954] net_ratelimit: 5 callbacks suppressed [ 1658.716033][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x64000000) 15:10:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xd33, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x24, 0x0, 0x0) 15:10:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2f, 0x0, 0x0) 15:10:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x28, 0x0, 0x0) 15:10:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setreuid(r1, r2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) [ 1659.040693][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x29, 0x0, 0x0) 15:10:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x25, 0x0, 0x0) 15:10:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x65000000) 15:10:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) 15:10:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x1100, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x26, 0x0, 0x0) 15:10:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2a, 0x0, 0x0) 15:10:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/108, &(0x7f0000000100)=0x6c) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x66000000) 15:10:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x31, 0x0, 0x0) 15:10:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x1200, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1659.509396][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2b, 0x0, 0x0) 15:10:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x27, 0x0, 0x0) 15:10:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x1206, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x67000000) 15:10:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2c, 0x0, 0x0) 15:10:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x32, 0x0, 0x0) [ 1659.768421][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x28, 0x0, 0x0) 15:10:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x1300, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33, 0x0, 0x0) 15:10:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2d, 0x0, 0x0) 15:10:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0xc0000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x29, 0x0, 0x0) 15:10:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x68000000) [ 1660.079611][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x330d, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x34, 0x0, 0x0) 15:10:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2e, 0x0, 0x0) 15:10:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2a, 0x0, 0x0) 15:10:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x3f00, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x69000000) 15:10:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x35, 0x0, 0x0) 15:10:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2f, 0x0, 0x0) 15:10:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2b, 0x0, 0x0) 15:10:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="008b03ec26", @ANYRES16=r3, @ANYBLOB="00010000000000000000010000000600030005000000080009000000000006000200006c44763036a18c094bf6856700000008000a00"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000800) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) 15:10:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2c, 0x0, 0x0) 15:10:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x36, 0x0, 0x0) [ 1660.709180][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6a000000) [ 1660.795503][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.871311][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x31, 0x0, 0x0) 15:10:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x37, 0x0, 0x0) 15:10:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x34000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2d, 0x0, 0x0) 15:10:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) dup(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000000)) ioctl$FICLONE(r1, 0x40049409, r3) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x400300, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1661.113936][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6b000000) 15:10:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x32, 0x0, 0x0) 15:10:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x38, 0x0, 0x0) 15:10:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2e, 0x0, 0x0) [ 1661.287311][ T9649] input: syz1 as /devices/virtual/input/input2582 15:10:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf0ffff, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6c000000) 15:10:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33, 0x0, 0x0) 15:10:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2f, 0x0, 0x0) 15:10:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x39, 0x0, 0x0) 15:10:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x34, 0x0, 0x0) 15:10:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a, 0x0, 0x0) 15:10:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6d000000) 15:10:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) 15:10:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x810) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x35, 0x0, 0x0) [ 1661.845662][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3b, 0x0, 0x0) 15:10:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x31, 0x0, 0x0) 15:10:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x36, 0x0, 0x0) 15:10:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6e000000) [ 1662.059828][ T9740] input: syz1 as /devices/virtual/input/input2584 15:10:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3c, 0x0, 0x0) [ 1662.175155][ T9729] input: syz1 as /devices/virtual/input/input2585 15:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x32, 0x0, 0x0) 15:10:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x109140, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x37, 0x0, 0x0) 15:10:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x6f000000) 15:10:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x4010000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33, 0x0, 0x0) 15:10:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3d, 0x0, 0x0) 15:10:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x38, 0x0, 0x0) 15:10:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x5000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x34, 0x0, 0x0) 15:10:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x6, 0x0) mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x2000000, 0x100010, r1, 0x10000000) 15:10:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3e, 0x0, 0x0) 15:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x35, 0x0, 0x0) 15:10:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x39, 0x0, 0x0) 15:10:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x70000000) 15:10:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x36, 0x0, 0x0) 15:10:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x41, 0x0, 0x0) 15:10:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a, 0x0, 0x0) 15:10:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x42, 0x0, 0x0) 15:10:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0xffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000100)={0x40, "56f30088a89bb5fb879b42c1a6b2e00fe70d889a230ec10b21b1d776a0ff0a33440a5b7f4f6eea4a4c5c095c02f76f9c18d92b3cf747767a2ec48ff0150a901d"}) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x4, 0x10000, 0xf000, 0x2], 0x81, 0x80, 0x5}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000640)="9c4cc23df3fc75e5630df1e2b0a440a29ba072c3a29d824ccc337308e991973b0e8204cb61afe0437acc1ec21ed93329c245b1843a485c55ec02d012e0754de91ab468412d21497c6c7d935b55398d186e068dad64ae8e61e9dd66cc52d55f72c5b22683c8a4903abd7fcf9047c9b0dd61823b43fe3bacabda2ddfe1ef9a0d33ae9218b2610813b7", 0x88) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x71000000) 15:10:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x37, 0x0, 0x0) [ 1663.226873][ T9853] input: syz1 as /devices/virtual/input/input2586 15:10:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3b, 0x0, 0x0) [ 1663.314710][ T9871] input: syz1 as /devices/virtual/input/input2587 15:10:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x72000000) 15:10:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x43, 0x0, 0x0) 15:10:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x38, 0x0, 0x0) 15:10:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3c, 0x0, 0x0) 15:10:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xa000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x44, 0x0, 0x0) 15:10:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x39, 0x0, 0x0) [ 1663.638082][ T9904] input: syz1 as /devices/virtual/input/input2588 15:10:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xb000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3d, 0x0, 0x0) [ 1663.761085][ T7828] net_ratelimit: 3 callbacks suppressed [ 1663.761095][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x73000000) 15:10:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x45, 0x0, 0x0) [ 1663.908847][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.917121][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a, 0x0, 0x0) 15:10:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000080)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) 15:10:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x46, 0x0, 0x0) 15:10:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3e, 0x0, 0x0) 15:10:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x74000000) 15:10:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x10000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3b, 0x0, 0x0) 15:10:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) [ 1664.228796][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.231136][ T9956] input: syz1 as /devices/virtual/input/input2590 15:10:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x11000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x41, 0x0, 0x0) 15:10:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3c, 0x0, 0x0) 15:10:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x48, 0x0, 0x0) 15:10:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x12000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x288, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) dup(r1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x13) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x75000000) 15:10:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x49, 0x0, 0x0) 15:10:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x42, 0x0, 0x0) 15:10:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3d, 0x0, 0x0) 15:10:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x12060000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4a, 0x0, 0x0) 15:10:45 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x80) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x1f, 0x5, 0x8, 0x8001, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4b, 0x0, 0x0) 15:10:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3e, 0x0, 0x0) 15:10:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x13000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x43, 0x0, 0x0) 15:10:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x76000000) [ 1664.955399][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x41, 0x0, 0x0) 15:10:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4c, 0x0, 0x0) 15:10:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x44, 0x0, 0x0) 15:10:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x330d0000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x42, 0x0, 0x0) 15:10:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x77000000) [ 1665.268703][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x45, 0x0, 0x0) 15:10:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4d, 0x0, 0x0) 15:10:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x3f000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x60000, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x43, 0x0, 0x0) 15:10:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x78000000) 15:10:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x46, 0x0, 0x0) 15:10:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x81000000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4e, 0x0, 0x0) 15:10:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x44, 0x0, 0x0) 15:10:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x4000, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x79000000) 15:10:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) [ 1665.894748][T10132] input: syz1 as /devices/virtual/input/input2594 15:10:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4f, 0x0, 0x0) 15:10:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x45, 0x0, 0x0) [ 1666.028853][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x223, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x48, 0x0, 0x0) 15:10:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x46, 0x0, 0x0) 15:10:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x50, 0x0, 0x0) 15:10:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7a000000) 15:10:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xfffff000, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1666.308617][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x49, 0x0, 0x0) 15:10:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7b000000) 15:10:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) 15:10:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x51, 0x0, 0x0) [ 1666.551491][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22c800, 0x40) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz1\x00', {0x0, 0x0, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5078, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) r3 = dup(r2) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000000)) renameat(r1, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4a, 0x0, 0x0) 15:10:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x48, 0x0, 0x0) 15:10:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x52, 0x0, 0x0) [ 1666.790965][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7c000000) 15:10:47 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4b, 0x0, 0x0) [ 1666.884700][T10218] input: syz1 as /devices/virtual/input/input2596 15:10:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x49, 0x0, 0x0) [ 1666.982644][T10226] input: syz1 as /devices/virtual/input/input2597 15:10:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x53, 0x0, 0x0) 15:10:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) creat(&(0x7f0000000080)='./file0\x00', 0x49) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r4 = dup(r3) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:48 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xffffffff, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4c, 0x0, 0x0) 15:10:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x7d000000) 15:10:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4a, 0x0, 0x0) [ 1667.232417][T10259] input: syz1 as /devices/virtual/input/input2598 15:10:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x54, 0x0, 0x0) 15:10:48 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xf, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4d, 0x0, 0x0) [ 1667.381275][T10266] input: syz1 as /devices/virtual/input/input2600 15:10:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000336764e62eea8f041b1a1cc1bb010000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf25040000000c00098008000100fbffffff"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4b, 0x0, 0x0) 15:10:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xf5ffffff) 15:10:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x55, 0x0, 0x0) 15:10:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4e, 0x0, 0x0) [ 1667.575849][T10302] input: syz1 as /devices/virtual/input/input2602 15:10:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4c, 0x0, 0x0) 15:10:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4f, 0x0, 0x0) 15:10:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x56, 0x0, 0x0) 15:10:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xfeffffff) 15:10:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4d, 0x0, 0x0) 15:10:48 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x10, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1667.864348][T10333] input: syz1 as /devices/virtual/input/input2603 15:10:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x50, 0x0, 0x0) 15:10:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x57, 0x0, 0x0) 15:10:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4e, 0x0, 0x0) 15:10:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x23, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xfffffff5) 15:10:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x41004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x165200) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0xfffffffffffffcec, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x17, &(0x7f00000001c0)={r4}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="430000006b2d464953a9af16fbe4d8062578c61de0885950a34998374d40277f068c3a6b5bc7a711a0a49b478330891445086f525c9199acce00"/71], &(0x7f0000000140)=0x4b) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r5, 0x10000}, &(0x7f00000001c0)=0x8) 15:10:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x51, 0x0, 0x0) 15:10:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x58, 0x0, 0x0) 15:10:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c0, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4f, 0x0, 0x0) 15:10:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x73, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x2, 'ovf\x00', 0x8, 0x571, 0x7c}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x59, 0x0, 0x0) 15:10:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x52, 0x0, 0x0) 15:10:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xfffffffe) 15:10:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x50, 0x0, 0x0) 15:10:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xec0, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5a, 0x0, 0x0) 15:10:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x33fe0, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1000000000000) 15:10:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x53, 0x0, 0x0) 15:10:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x51, 0x0, 0x0) [ 1668.751438][T10400] input: syz1 as /devices/virtual/input/input2604 15:10:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5b, 0x0, 0x0) 15:10:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x14, 0x8}, 0x18) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r2, 0x2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[], 0x2bcf) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000240)={0x9, 0x1, 0x0, [{0x80000001, 0xfffffffffffffff8, 0x7fff, 0x48, 0x5, 0x7, 0xfa}]}) shutdown(r3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0xdc8, 0xf8, 0x9f0, 0x0, 0xb10, 0xc28, 0xcf8, 0xcf8, 0xcf8, 0xcf8, 0xcf8, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x93, 0x17}}}, {{@ipv6={@private1={0xfc, 0x1, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xffffff00], 'batadv0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x3c, 0x3, 0x4, 0x2}, 0x0, 0x8b0, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0, 'u32\x00'}, {[{[{0x7fffffff, 0x3}, {0x400, 0x3}, {0x66bc2a2d, 0x1}, {0x7}, {0xfffffffd, 0x3}, {0x1, 0x1}, {0x5}, {0x200}, {0x9, 0x3}, {0x42a2}, {0xfffffffc, 0x2}], [{0x1, 0x5e}, {0xd30, 0xb269}, {0x1f, 0xa2a}, {0x81, 0x69b0}, {0x26, 0x7ff}, {0x15d38}, {0x800, 0x4}, {0x7, 0x10000}, {0xb7b, 0x8}, {0x2, 0x5}, {0x9, 0x81}], 0x3}, {[{0x4, 0x3}, {0x6}, {0xc87b, 0x2}, {0x80000000, 0x1}, {0x9, 0x3}, {0xa7a, 0x3}, {0x4}, {0x9, 0x1}, {0x3, 0x85e44f268760aa16}, {0x5f2446f2, 0x1}, {0x44, 0x3}], [{0x3, 0x81}, {0x5, 0x8}, {0x9, 0xffff8000}, {0x33, 0x10000}, {0x4, 0x4}, {0x5, 0x101}, {0x1f, 0x8cfe}, {0x5, 0x6}, {0x10001, 0x80000000}, {0xfffffffa}, {0x3, 0x5}], 0x5, 0xb}, {[{0x8, 0x2}, {0xa, 0x3}, {0x400, 0x2}, {0x7, 0x3}, {0x80000001, 0x1}, {0x80000000}, {0x0, 0x2}, {0x10001}, {0x6, 0x1}, {0x100, 0x1}, {0x7}], [{0x1, 0xfff}, {0x6, 0x5}, {0x0, 0x3f}, {0x9, 0x5}, {0x7b21, 0x3f}, {0x4, 0x5}, {0x468, 0x7}, {0x7, 0xa450}, {0x80000001, 0xc7d}, {0xffff, 0x10000}, {0x9, 0x2}], 0x6, 0x9}, {[{0x1ff, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x2}, {0x4cf5, 0x3}, {0x10000, 0x2}, {0x3}, {0x3, 0x3}, {0xfffffffb, 0x1}, {0x6, 0x3}, {0x8}], [{0x2, 0x5}, {0x980, 0xe6}, {0x1, 0x1000}, {0x7ff, 0x7}, {0x0, 0x4441}, {0x1, 0x9}, {0x3, 0x9}, {0x1, 0xfff}, {0x5, 0x6}, {0x5, 0x5}, {0x7785, 0x1}], 0x5, 0x9}, {[{0x40, 0x3}, {0x1, 0x2}, {0x87, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x2}, {0x3d}, {0x8000}, {0x6, 0x3}, {0x4, 0x1}, {0x8, 0x2}], [{0x6c, 0x200}, {0xfffffffc, 0x1}, {0x9, 0x7fffffff}, {0x9, 0x8000}, {0x5, 0x800}, {0x8, 0xffffffe1}, {0x5, 0x8001}, {0x400, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0xfffffff7}], 0x8}, {[{0x0, 0x2}, {0x8000, 0x3}, {0x8001, 0x2}, {0x9, 0x1}, {0x2}, {0xd2c, 0x3}, {0xb4b5}, {0x9, 0x3}, {}, {0x5, 0x3}, {0x80}], [{0x3}, {0xfffffff9}, {0x3, 0xa11e}, {0x1ff, 0x6}, {0x82, 0x9}, {0x5, 0x20}, {0x4c, 0x6}, {0xffffffff, 0x401}, {0x9, 0x1}, {0x800}, {0x80, 0x6}], 0x9, 0xa}, {[{0x4, 0x1}, {0x9, 0x1}, {0x5}, {0x8}, {0x401, 0x3}, {0x2, 0x3}, {0x400, 0x3}, {0x6, 0x3}, {0x5, 0x2}, {0x8, 0x2}, {0xfe2}], [{0x6, 0x9}, {0x4, 0xff}, {0x200, 0x7a9}, {0x4, 0x4}, {0x40, 0x7}, {0x4, 0x8}, {0x10001, 0x7ff}, {0x20, 0x8}, {0xba1, 0xe79c}, {0x7, 0x9}, {0xff, 0x6}], 0x7, 0x5}, {[{0x3, 0x1}, {0x7d4639ea, 0x1}, {0x5}, {0x2, 0x2}, {0xff, 0x3}, {0x68}, {}, {0x8, 0x2}, {0x8, 0x3}, {0x1}, {0x7f, 0x3}], [{0x4, 0x4}, {0x8, 0xc908}, {0x6}, {0x81, 0x7}, {0x5}, {0xfffffff9, 0x6}, {0x1f, 0x2}, {0x7, 0x6}, {0xfffffff9, 0x2}, {0x0, 0x4}, {0x3f, 0x401}], 0x2, 0x9}, {[{0x1, 0x1}, {0x6, 0x2}, {0x5}, {0x1f, 0x2}, {0x5f9}, {0x0, 0x1}, {0x800, 0x2}, {0x7, 0x3}, {0x6}, {0x6, 0x1}, {0x8}], [{0x0, 0xa110}, {0x80000000, 0x10000}, {0x8, 0x5}, {0x9, 0x2}, {0x7, 0x5}, {0x12, 0x7}, {0x9}, {0x62, 0x3}, {0x3, 0x5}, {0x1, 0x57f2}, {0xe9, 0xcf63}], 0x9, 0x3}, {[{0x2, 0x2}, {0x0, 0x2}, {0x8000, 0x1}, {0x1, 0x2}, {0x427a, 0x2}, {0x800}, {0x0, 0x1}, {0x1}, {0x9, 0x3}, {0xffff7fff, 0x1}, {0x1}], [{0x460, 0xa4}, {0x0, 0x2c7018e5}, {0xef, 0x1}, {0x401, 0x4}, {0x1, 0x5}, {0x7, 0xffffff0d}, {0x5, 0x4}, {0x1, 0x4e7}, {0x5, 0x714}, {0x1, 0xf6b3}, {0x8, 0x1}], 0x2, 0x9}, {[{0x7}, {0x4, 0x1}, {0x7f, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x3}, {0x3, 0x2}, {0x3ff, 0x2}, {0x101, 0x1}, {0x8, 0x2}], [{0x0, 0x5}, {0x8, 0xdca}, {0x9, 0xfffff7c5}, {0xffffffff, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x8, 0x81}, {0xffffffff, 0x7ff}, {0x0, 0x7}, {0x3f, 0x8}, {0x1, 0x4}], 0x6}], 0x2, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x9}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv6=@mcast1, 0x1b, 0x22, 0x6b5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xb}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0x7}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x100, 0x1, 0x1, [0x7, 0xf309, 0x8, 0x101, 0x0, 0x8, 0x7, 0x401, 0xa1d, 0xffff, 0x7, 0x0, 0x7, 0xfc00, 0x24, 0x581], 0xb}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xe28) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:49 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x20000238, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x2000000000000) 15:10:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x54, 0x0, 0x0) 15:10:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5c, 0x0, 0x0) 15:10:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x52, 0x0, 0x0) 15:10:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x7ffff000, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1669.109589][ T7828] net_ratelimit: 5 callbacks suppressed [ 1669.109599][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.195391][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x100000000000000) 15:10:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5d, 0x0, 0x0) 15:10:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xfffffdef, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x6c, 0x1, 0x0, "e697eba5f29061702f45fb5dc7063a2c", "0900d3eb9e063b63268d3509a2dca0efe8ad9fe5603a7e9a310185dd08656deba1d6382097f6d7092120063027443bf2b31c404fec43bde53887be2409ed649b5067d987870854d3aea048c90c002f07c27e080e1b217b"}, 0x6c, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x11, r2, 0x180000000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x14000, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x55, 0x0, 0x0) 15:10:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x53, 0x0, 0x0) [ 1669.439050][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5e, 0x0, 0x0) 15:10:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x200000000000000) 15:10:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0xf, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x56, 0x0, 0x0) 15:10:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x54, 0x0, 0x0) [ 1669.649910][T10502] input: syz1 as /devices/virtual/input/input2606 15:10:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5f, 0x0, 0x0) [ 1669.723316][T10502] input: syz1 as /devices/virtual/input/input2607 15:10:50 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x73, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x55, 0x0, 0x0) 15:10:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) sendto$l2tp6(r2, &(0x7f0000000080)="c0c342a3667c1e3d525d9dc736a5d994dcfb1a0362ab7ad08fd91f2285c944", 0x1f, 0x20008840, &(0x7f00000000c0)={0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x2d}, 0x101}, 0x20) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) [ 1669.828310][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x300000000000000) 15:10:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x57, 0x0, 0x0) 15:10:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x56, 0x0, 0x0) [ 1669.992210][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x2, 0x0) [ 1670.105380][T10548] input: syz1 as /devices/virtual/input/input2608 15:10:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x58, 0x0, 0x0) [ 1670.190424][T10548] input: syz1 as /devices/virtual/input/input2609 15:10:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x57, 0x0, 0x0) [ 1670.231738][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x3, 0x0, 0x1, 0x4}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)="46adfca7d4db7d26c279fc2d4e22ef32477244fcb2576548945a3d137a07042cb850aed447f58cc3275071bd3ec2201cf4cad3321950e45820beb485ebee93e97a687fff3b0d4e10b182b92f63d97e7f5daab5753041d75ee8209d626b6543", 0x5f}, {&(0x7f0000000740)="f7f35fc5450c637771cc4afd7eca7cc0190869ff278221dd2d1d0855373c57d47a7db6584951192d7c9b8cdae998411086db5d8738575bc9a0042db5c4b8cecfa76804c58fa182003b270a733f77dd60af5ea537393b9617e35100df0982719b768a66a2935f7dba6d70b373f0043c3b6d0103b6260b13c5af782e6deaa7fd74425f86e01bb96de654691fd424d21b4d066e2d5ec3270a60906f3cf249699be5", 0xa0}, {&(0x7f0000000800)="b426574c5a4ee83c5cf0d6b99294c4b7222d70f31753d1a33f0bd7f156cfbba330b0bb264e0cfea451a961219213c0540258899655177f165e7308b90b7f6b9f381938251539861f2d5745ccf27562e6fce7e63d7c51b79315", 0x59}, {&(0x7f0000000880)="c22d72aebd6b516abca32dcb959221cacc82c6881cc576ac3f836d169f26c95c28b27e1f98bceae7", 0x28}, {&(0x7f00000008c0)="a3fc44aeb99e0048f5384dbf90f477f0bc64d6697eb1dafef53a20a2fcf5af8addd8fa5fbfff65bfe05dc2fa9d0cc16ea0b98ed79b6ad9d18ef06da332e616cb5fd5ca41881f760edbe9acc5855f1253a99bddad56b59dc1b0a255274effa609c484910175e0c1edf748edfd1f7a1684641bb8480ddd5abc342a", 0x7a}, {&(0x7f0000000940)="d3efdd8b302fdf76be0a4050eff3edb0e17e0366d7eebfc362bd64a9c494b0f5977322872e4b4571cc0ba312c12aebbfbe4b7abf119af4c2af57974fa3bf19505bb5c9bd4ed15e5ea11407e045b8efb019c91d2ec28d9df3c8994a3d6322a95f3aaaa0da824888006cbee0c91406ffaba7cf1e35cfc14a7178a0c9bc15dfecc71efcc12f36bc1a94305acbce04f1dca89b1a7d6837e6bf17389e3c564348fe414924daca3be4331333260b3fcc9908c299571af0201ed0ffb7f2c484256926710fd90c6b1f840a97b47242d1b6728f815f031f2096122116029c2d66253bc6f202fa", 0xe2}, {&(0x7f0000000a40)}], 0x7, &(0x7f0000000b00)=[{0x50, 0x108, 0x3b23, "5fd01c49c6b386e96ffe5aa120f7a49396a9bd3cfff46e652fa2c625efbc95b2a07bec4870e3e34f70a71d51327657dc2afa3064c01bcfd0a775a50f"}, {0x98, 0x10b, 0x0, "2d7b98d213286b4ee3e4b641c91d84f513caca79e1caf1bc06b86d432a766ebc069d054aff0106791e984730888c516d6bd316c1b20b4ddfe55a3adfd02762107acf2c4db8a57470df31e2dd8438f5cc149f7642de9e1320a33f7526149cfa04e73c16f2e2213aabc07cb2b28c9b84383d29867b9201b7f00bc90cf641a6d5c9ab1d03c5"}], 0xe8}, 0x40) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x10000, 0x0) getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xc) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x400000000000000) 15:10:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x3, 0x0) 15:10:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x59, 0x0, 0x0) [ 1670.468672][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x58, 0x0, 0x0) 15:10:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x3, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) [ 1670.524367][T10594] input: syz1 as /devices/virtual/input/input2610 15:10:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x500000000000000) 15:10:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4, 0x0) [ 1670.692760][T10605] input: syz1 as /devices/virtual/input/input2611 15:10:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x59, 0x0, 0x0) 15:10:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5a, 0x0, 0x0) 15:10:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) dup(r1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000000c0)={0x40, 0x998d145, 0x80000, 0x81}) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x5, 0x0) 15:10:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x600000000000000) 15:10:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5a, 0x0, 0x0) 15:10:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x5, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5b, 0x0, 0x0) 15:10:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x6, 0x0) [ 1671.268303][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5c, 0x0, 0x0) 15:10:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x6, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5b, 0x0, 0x0) 15:10:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x700000000000000) 15:10:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x7, 0x0) 15:10:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x13}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000005) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) [ 1671.510527][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x8, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5d, 0x0, 0x0) 15:10:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5c, 0x0, 0x0) 15:10:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x800000000000000) 15:10:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x47, 0x0) 15:10:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5e, 0x0, 0x0) 15:10:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x9, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5d, 0x0, 0x0) 15:10:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x900000000000000) 15:10:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x300, 0x0) 15:10:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$char_raw(0xffffffffffffffff, &(0x7f0000001600)={"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"}, 0x8c00) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0xa, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5f, 0x0, 0x0) 15:10:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5e, 0x0, 0x0) 15:10:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x500, 0x0) 15:10:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0xb, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1672.310767][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xa00000000000000) 15:10:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5f, 0x0, 0x0) 15:10:53 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3e) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)="13d112fa6472fa28dc5fbc585416af1c32a9592af8c2017cfe364e6e6b044b0309ac5ffb1c407d8055eb4169f32b93ac121dcbb51f9f660427401f6d46ea51621404f7f4f9353679939faf316bd29bd63835dbe5b03e9fd59af397244c2b392400f13543973ccfdb4e88dab6c01f4e5cd7f7320756e287448097407669a2c1273f32633fffa8715a67a61e2985a3b7cd3ba0e5a3a87693d1146bad0a12cfdfec6c04ead9bb2a1b96b118fa21") r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r1}, 0x10) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x859c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0xffffffffffffffff, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x600, 0x0) 15:10:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x2, 0x0) 15:10:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0xf, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) 15:10:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x700, 0x0) 15:10:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xb00000000000000) 15:10:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x3, 0x0) 15:10:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x2, 0x0) 15:10:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x10, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4700, 0x0) 15:10:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4, 0x0) 15:10:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x11, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x3, 0x0) 15:10:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0xf0ff7f, 0x0) 15:10:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xc00000000000000) 15:10:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x5, 0x0) 15:10:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x12, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x1000000, 0x0) 15:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4, 0x0) 15:10:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x2000000, 0x0) 15:10:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x6, 0x0) 15:10:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xd00000000000000) 15:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x5, 0x0) 15:10:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0xf0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x3000000, 0x0) 15:10:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x7, 0x0) 15:10:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xe00000000000000) 15:10:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x104, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x6, 0x0) 15:10:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4000000, 0x0) 15:10:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x47, 0x0) 15:10:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x300, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x7, 0x0) 15:10:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0xf00000000000000) 15:10:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x5000000, 0x0) 15:10:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x300, 0x0) 15:10:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x500, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "514c1b1800c124dc0265939cf5190495c1b2fe347f2eed0b7bbfec73877443bd05b565af76b7ba9fac770c5ea69788758e965be67a5fbc2b0ac3832ca158a3206bc67d51198f8db94d48c55f714120eced67ef3a91c0fcd7c3bed4bf4ec02482aacd0cab3e2cf987ba0751edf875efaf270e835cb5512f0a831aef1b1067399cbb54e495b1aec0a7729a218d1b8852e5aca69841dd669e09db063ff7b971c7f1919ed10e86ae2c98ff48c38f67fcae15ffa262f28d78d20cd3c0c66aeba8fd490263bd615cb0c521bd1c9d9bdb099001044145f001348840f04dc3888bae47e7f93cf9bcdff96195c04bd8836db480ccecd4797dd8f30ffbbdf875ca8a5b4f68"}]}}]}, 0x138}}, 0x0) 15:10:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x47, 0x0) 15:10:55 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000240)={0x0, 0x2, 0x80000001}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={0x0, 0x6d, 0x9f}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {0x0, 0x0, 0x101}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x3, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x40000]}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000080)={0x0, 0x2}) 15:10:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1000000000000000) 15:10:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x300, 0x0) 15:10:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x500, 0x0) 15:10:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x6000000, 0x0) 15:10:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x600, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1674.407860][T25604] net_ratelimit: 5 callbacks suppressed [ 1674.407870][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1100000000000000) 15:10:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x500, 0x0) [ 1674.463264][T10973] input: syz1 as /devices/virtual/input/input2614 15:10:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f1df7f8b057b7487c6ee6b14b4f843b4f4d98a72fbb5d5b5e57ba818559c4a5a0b6c4ee8b281d43c71a5f63049d228b6bfa2f743f32da5884c21c4bcad0609a7", @ANYRES32=r2, @ANYRESHEX], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x600, 0x0) 15:10:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x7000000, 0x0) 15:10:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x612, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 1674.627826][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:10:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x600, 0x0) 15:10:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, 0x0}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x1200000000000000) 15:10:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x700, 0x0) 15:10:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x47000000, 0x0) [ 1674.861684][T11011] input: syz1 as /devices/virtual/input/input2616 15:10:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x700, 0x0) 15:10:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0x900, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 15:10:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4700, 0x0) 15:10:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0xa00, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x7fffefff, 0x0) 15:10:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x4700, 0x0) 15:10:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xd0b, 0xb00, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 15:10:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0xf0ff7f, 0x0) [ 1675.250726][T11056] input: syz1 as /devices/virtual/input/input2618 [ 1675.433289][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.677606][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.916937][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.075490][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.147657][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.479507][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.717960][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.518262][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.588022][ T8954] net_ratelimit: 6 callbacks suppressed [ 1679.588032][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.828083][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.627444][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.869819][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.706995][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.912277][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.987198][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.147068][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.787915][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.956921][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.893436][T25971] net_ratelimit: 2 callbacks suppressed [ 1684.893445][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.036844][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.044969][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.187066][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.754008][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.906763][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.070671][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.960615][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.106530][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.986641][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.076396][T25971] net_ratelimit: 6 callbacks suppressed [ 1690.076405][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.227397][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.106387][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.106394][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.266251][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.266277][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.146115][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.316867][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.187619][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.345882][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.276434][ T8954] net_ratelimit: 4 callbacks suppressed [ 1695.276441][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.345808][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.438270][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.305701][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.466036][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.185590][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.345762][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.360175][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.515608][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.906352][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.385336][ T7828] net_ratelimit: 5 callbacks suppressed [ 1700.385343][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.468937][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.625261][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.505419][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.665121][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.545111][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.705043][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.275210][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.425051][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.585239][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.666687][T25971] net_ratelimit: 4 callbacks suppressed [ 1705.666694][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.824755][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.314747][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.464882][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.704720][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.864937][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.515092][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.744705][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.904573][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.784501][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.864412][T25971] net_ratelimit: 5 callbacks suppressed [ 1710.864418][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.024264][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.904477][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.064133][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.384138][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.555850][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.945880][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.104089][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.984125][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.144390][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.063981][T25971] net_ratelimit: 5 callbacks suppressed [ 1716.063988][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.223801][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.103852][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.112275][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.266714][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.155507][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.313610][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.463587][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.623563][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.185235][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.273428][ T8954] net_ratelimit: 3 callbacks suppressed [ 1721.273437][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.424121][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.503355][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.663334][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.303487][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.463741][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.343120][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.503146][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.143084][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.384926][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.464156][T25604] net_ratelimit: 5 callbacks suppressed [ 1726.464166][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.622768][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.702994][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.502788][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.595735][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.663509][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.752921][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.542799][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.702546][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.582695][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.662440][T25604] net_ratelimit: 4 callbacks suppressed [ 1731.662450][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.822276][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.703483][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.872183][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.662112][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.742532][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.756178][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.822230][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.915448][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.792154][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.701857][ T7828] net_ratelimit: 4 callbacks suppressed [ 1736.701867][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.863308][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.874341][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.021837][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.912738][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.071730][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.951813][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.103850][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.741631][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.901578][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.063858][T25604] net_ratelimit: 4 callbacks suppressed [ 1742.063867][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.231312][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.781326][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.941366][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.114046][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.277228][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.341333][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.141259][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.312460][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.181450][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.270981][T25971] net_ratelimit: 6 callbacks suppressed [ 1747.270988][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.430956][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.300856][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.461131][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.860748][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.021829][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.350843][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.506517][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.381712][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.540612][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.460778][T25604] net_ratelimit: 7 callbacks suppressed [ 1752.460788][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.620409][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.941680][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.950750][ T231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.961238][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.972169][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.500646][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.660304][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.552633][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.700267][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.660146][T25604] net_ratelimit: 10 callbacks suppressed [ 1757.660156][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.822944][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.979935][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.140403][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.699880][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.859831][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.749873][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.899810][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.779710][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.942661][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.859557][T25604] net_ratelimit: 5 callbacks suppressed [ 1762.859567][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.032776][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.899479][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.059336][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.067465][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.229388][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.949382][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.099270][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.111483][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.989440][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.059094][T25604] net_ratelimit: 5 callbacks suppressed [ 1768.059100][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.218894][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.098885][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.268915][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.138844][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.156512][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.298755][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.298762][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.182276][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.338631][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.188520][T26039] net_ratelimit: 3 callbacks suppressed [ 1773.188536][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.205133][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.216890][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.228159][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.258545][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.339389][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.418635][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.308563][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.458822][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.698328][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.468597][T25971] net_ratelimit: 8 callbacks suppressed [ 1778.468604][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.629945][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.338395][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.417991][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.498103][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.657925][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.537958][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.697858][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.577847][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.737804][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.658596][T25971] net_ratelimit: 5 callbacks suppressed [ 1783.658605][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.828257][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.308395][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.707682][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.857492][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.417394][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.497488][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.737448][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.897585][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.787504][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.867259][T25971] net_ratelimit: 5 callbacks suppressed [ 1788.867265][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.027068][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.907139][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.059606][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.937139][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.096890][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.339888][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.497831][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.586882][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.980974][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.906867][T26039] net_ratelimit: 3 callbacks suppressed [ 1793.906877][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.056666][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.216729][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.537597][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.616513][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.106800][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.256553][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.136923][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.145874][ T231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.164014][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.268122][T25604] net_ratelimit: 8 callbacks suppressed [ 1799.268130][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.416188][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.296186][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.456200][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.626478][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.696051][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.936072][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.336147][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.499201][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.375880][ T2600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.456246][T25971] net_ratelimit: 6 callbacks suppressed [ 1804.456256][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.615713][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.505813][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.657411][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.537379][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.695516][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.703628][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.776368][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.575629][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.735414][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.668634][T25971] net_ratelimit: 2 callbacks suppressed [ 1809.668643][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.745224][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.815214][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.815899][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.833095][ T302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.844201][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.853072][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.535513][T26039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.695268][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.939075][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.854752][T25971] net_ratelimit: 9 callbacks suppressed [ 1814.854762][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.094758][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.814605][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.894756][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.907007][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.134626][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.935468][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.178524][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.974664][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.218686][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.054539][T25971] net_ratelimit: 4 callbacks suppressed [ 1820.054548][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.134334][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.294386][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.104257][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.334148][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.894202][T30665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.974168][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.144245][T25604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.374076][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.694068][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.613921][ T1172] INFO: task syz-executor.5:11026 can't die for more than 143 seconds. [ 1824.622187][ T1172] syz-executor.5 D28360 11026 6841 0x00000004 [ 1824.632026][ T1172] Call Trace: [ 1824.642484][ T1172] __schedule+0x8e5/0x21e0 [ 1824.648827][ T1172] ? io_schedule_timeout+0x140/0x140 [ 1824.654372][ T1172] ? io_wq_cancel_all+0x5a0/0x5a0 [ 1824.659401][ T1172] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1824.666150][ T1172] schedule+0xd0/0x2a0 [ 1824.670837][ T1172] io_uring_flush+0x740/0xa90 [ 1824.676655][ T1172] ? pick_file+0x129/0x1e0 [ 1824.681084][ T1172] ? io_req_task_cancel+0x20/0x20 [ 1824.686297][ T1172] ? lock_downgrade+0x830/0x830 [ 1824.691259][ T1172] ? add_wait_queue_exclusive+0x180/0x180 [ 1824.699081][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 1824.704379][ T1172] ? io_req_task_cancel+0x20/0x20 [ 1824.709413][ T1172] filp_close+0xb4/0x170 [ 1824.714006][ T1172] __close_fd+0x2f/0x50 [ 1824.718460][ T1172] __x64_sys_close+0x69/0x100 [ 1824.724392][ T1172] do_syscall_64+0x2d/0x70 [ 1824.728813][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1824.734862][ T1172] RIP: 0033:0x416b81 [ 1824.739783][ T1172] Code: Bad RIP value. [ 1824.745157][ T1172] RSP: 002b:00007ffe3f2afcf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1824.756519][ T1172] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000416b81 [ 1824.764561][ T1172] RDX: 0000000000000000 RSI: 0000000001190f98 RDI: 0000000000000006 [ 1824.772528][ T1172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1824.780576][ T1172] R10: 00007ffe3f2afde0 R11: 0000000000000293 R12: 0000000001191058 [ 1824.789965][ T1172] R13: 0000000000198fd3 R14: ffffffffffffffff R15: 000000000118cfec [ 1824.798044][ T1172] INFO: task syz-executor.5:11026 blocked for more than 143 seconds. [ 1824.806259][ T1172] Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1824.812914][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1824.821615][ T1172] syz-executor.5 D28360 11026 6841 0x00000004 [ 1824.828349][ T1172] Call Trace: [ 1824.831789][ T1172] __schedule+0x8e5/0x21e0 [ 1824.837358][ T1172] ? io_schedule_timeout+0x140/0x140 [ 1824.842934][ T1172] ? io_wq_cancel_all+0x5a0/0x5a0 [ 1824.848748][ T1172] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1824.854843][ T1172] schedule+0xd0/0x2a0 [ 1824.858923][ T1172] io_uring_flush+0x740/0xa90 [ 1824.867585][ T1172] ? pick_file+0x129/0x1e0 [ 1824.872004][ T1172] ? io_req_task_cancel+0x20/0x20 [ 1824.877248][ T1172] ? lock_downgrade+0x830/0x830 [ 1824.883345][ T1172] ? add_wait_queue_exclusive+0x180/0x180 [ 1824.889172][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 1824.894907][ T1172] ? io_req_task_cancel+0x20/0x20 [ 1824.900212][ T1172] filp_close+0xb4/0x170 [ 1824.905765][ T1172] __close_fd+0x2f/0x50 [ 1824.910051][ T1172] __x64_sys_close+0x69/0x100 [ 1824.914802][ T1172] do_syscall_64+0x2d/0x70 [ 1824.919936][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1824.925908][ T1172] RIP: 0033:0x416b81 [ 1824.929999][ T1172] Code: Bad RIP value. [ 1824.934576][ T1172] RSP: 002b:00007ffe3f2afcf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1824.943194][ T1172] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000416b81 [ 1824.951415][ T1172] RDX: 0000000000000000 RSI: 0000000001190f98 RDI: 0000000000000006 [ 1824.960277][ T1172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1824.968337][ T1172] R10: 00007ffe3f2afde0 R11: 0000000000000293 R12: 0000000001191058 [ 1824.978404][ T1172] R13: 0000000000198fd3 R14: ffffffffffffffff R15: 000000000118cfec [ 1824.986476][ T1172] [ 1824.986476][ T1172] Showing all locks held in the system: [ 1824.994280][ T1172] 1 lock held by khungtaskd/1172: [ 1824.999303][ T1172] #0: ffffffff89c66c40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1825.009268][ T1172] 2 locks held by in:imklog/6520: [ 1825.014433][ T1172] #0: ffff8880932b8b70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1825.023755][ T1172] #1: ffff8880ae635e18 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x232/0x21e0 [ 1825.032913][ T1172] 2 locks held by agetty/6757: [ 1825.037774][ T1172] #0: ffff88808b0ef098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1825.047778][ T1172] #1: ffffc90000fe42e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1825.058036][ T1172] [ 1825.061416][ T1172] ============================================= [ 1825.061416][ T1172] [ 1825.069919][ T1172] NMI backtrace for cpu 1 [ 1825.074341][ T1172] CPU: 1 PID: 1172 Comm: khungtaskd Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1825.083436][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.093472][ T1172] Call Trace: [ 1825.096758][ T1172] dump_stack+0x18f/0x20d [ 1825.101181][ T1172] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1825.106363][ T1172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1825.111970][ T1172] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1825.117929][ T1172] watchdog+0xd89/0xf30 [ 1825.122062][ T1172] ? trace_sched_process_hang+0x2e0/0x2e0 [ 1825.127796][ T1172] kthread+0x3b5/0x4a0 [ 1825.131841][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 1825.136932][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 1825.142048][ T1172] ret_from_fork+0x1f/0x30 [ 1825.146783][ T1172] Sending NMI from CPU 1 to CPUs 0: [ 1825.152715][ C0] NMI backtrace for cpu 0 [ 1825.152723][ C0] CPU: 0 PID: 3889 Comm: systemd-journal Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1825.152730][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.152734][ C0] RIP: 0010:0xffffffffa0012c0c [ 1825.152747][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <0f> 1f 44 00 00 55 48 89 e5 48 81 ec 00 00 00 00 53 41 55 41 56 41 [ 1825.152751][ C0] RSP: 0018:ffffc90005387d90 EFLAGS: 00000246 [ 1825.152760][ C0] RAX: 1ffff920001b9c06 RBX: ffff888097161800 RCX: dffffc0000000000 [ 1825.152766][ C0] RDX: ffff8880940320c0 RSI: ffffc90000dce038 RDI: ffffc90005387e40 [ 1825.152773][ C0] RBP: ffffc90000dce000 R08: 0000000000000001 R09: 0000000000000001 [ 1825.152779][ C0] R10: 000000007fff0000 R11: 0000000000000000 R12: dffffc0000000000 [ 1825.152785][ C0] R13: 000000007fff0000 R14: 000000007fff0000 R15: ffffc90005387e40 [ 1825.152791][ C0] FS: 00007fd623f568c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1825.152797][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1825.152803][ C0] CR2: 00007fd620f8a028 CR3: 0000000094958000 CR4: 00000000001506f0 [ 1825.152808][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1825.152814][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1825.152818][ C0] Call Trace: [ 1825.152822][ C0] ? __seccomp_filter+0x151/0x1520 [ 1825.152827][ C0] ? seccomp_notify_ioctl+0xd90/0xd90 [ 1825.152831][ C0] ? lock_acquire+0x1f1/0xad0 [ 1825.152835][ C0] ? pid_task+0x120/0x120 [ 1825.152840][ C0] ? find_held_lock+0x2d/0x110 [ 1825.152844][ C0] ? __task_pid_nr_ns+0x1b7/0x490 [ 1825.152849][ C0] ? mem_cgroup_move_account+0xc80/0xc80 [ 1825.152853][ C0] ? lock_is_held_type+0xbb/0xf0 [ 1825.152857][ C0] ? __secure_computing+0xfc/0x360 [ 1825.152862][ C0] ? syscall_enter_from_user_mode+0xb6/0x290 [ 1825.152866][ C0] ? do_syscall_64+0xf/0x70 [ 1825.152871][ C0] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1825.161984][ T1172] Kernel panic - not syncing: hung_task: blocked tasks [ 1825.365310][ T1172] CPU: 1 PID: 1172 Comm: khungtaskd Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1825.374387][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.384501][ T1172] Call Trace: [ 1825.387773][ T1172] dump_stack+0x18f/0x20d [ 1825.392130][ T1172] panic+0x2e3/0x75c [ 1825.396054][ T1172] ? __warn_printk+0xf3/0xf3 [ 1825.400644][ T1172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1825.406266][ T1172] ? preempt_schedule_thunk+0x16/0x18 [ 1825.411615][ T1172] ? watchdog.cold+0x22d/0x24b [ 1825.417384][ T1172] ? watchdog+0xc59/0xf30 [ 1825.421694][ T1172] watchdog.cold+0x23e/0x24b [ 1825.426263][ T1172] ? trace_sched_process_hang+0x2e0/0x2e0 [ 1825.431966][ T1172] kthread+0x3b5/0x4a0 [ 1825.436064][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 1825.441154][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 1825.446246][ T1172] ret_from_fork+0x1f/0x30 [ 1825.452163][ T1172] Kernel Offset: disabled [ 1825.456488][ T1172] Rebooting in 86400 seconds..