last executing test programs: 3.525522753s ago: executing program 2 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) 3.26032297s ago: executing program 2 (id=93): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @short={0x2, 0xb26e7ea11fd4317c}}, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) chdir(0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2.964122287s ago: executing program 2 (id=96): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.03407653s ago: executing program 2 (id=98): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_clone3(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) 1.550751232s ago: executing program 2 (id=104): r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000380)={0x6553f100, 0x3b023380}) clock_adjtime(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000400)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000440)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000480)={0x12, 0x0, 0x0, 0x2, 0x0, 0x10}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x5, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1a}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x1, 0x5, 0xdb}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x0, "bb02"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfffd}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 1.429197795s ago: executing program 1 (id=107): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a000000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.357142857s ago: executing program 1 (id=112): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100), 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 1.003522425s ago: executing program 2 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000200)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 931.107588ms ago: executing program 0 (id=120): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x810, 0x0}}], 0x34000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000e0b000/0x1000)=nil, 0x1000, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 881.817358ms ago: executing program 3 (id=121): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 809.48486ms ago: executing program 3 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000580)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0xfded, &(0x7f0000000600)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x12, {[@timestamp={0x8, 0xa, 0xffffa888}]}}, {"589bd78d2b71fe4b714665685135bf21072faafe96ec294d6c6539d4a740dea160dc1ee679706182018004878d22ec3cb6480fb088206fd0f5ffbd92e72bad8d1bcb2b9b613a84ad03c81acb638d608181625bd00c12cfe1514eebec0d2d3cdadca2e3c308e8595d5269701e0491674a51e87405fd955e7e46116c8b97da1fc719a824a9fc394b98445011cdecca5b715a3eeb84bd168efd80ab8dd7a308"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) 668.452434ms ago: executing program 3 (id=124): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x90) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) rename(&(0x7f0000000580)='./file1\x00', &(0x7f0000000200)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 624.559645ms ago: executing program 0 (id=125): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 579.260196ms ago: executing program 3 (id=127): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2e, 0x0, 0x1, 0x200}, 0x28) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) 548.418037ms ago: executing program 4 (id=128): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x18}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20082f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 513.195378ms ago: executing program 3 (id=129): mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 493.465188ms ago: executing program 0 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) close(0x3) 438.86129ms ago: executing program 3 (id=131): openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000780)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000c00)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x0, &(0x7f0000000d00), 0xfc, 0x4f9, &(0x7f0000000d40)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 369.165371ms ago: executing program 1 (id=132): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) 368.769451ms ago: executing program 4 (id=133): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 321.454932ms ago: executing program 0 (id=134): bind$x25(0xffffffffffffffff, 0x0, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 297.780183ms ago: executing program 4 (id=135): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x8123f3f502f2614e) bind$pptp(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) 249.161634ms ago: executing program 1 (id=136): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 217.500605ms ago: executing program 4 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmmsg(r1, &(0x7f00000001c0), 0x4000000000000f3, 0xe78c45c52654e640, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 171.740366ms ago: executing program 0 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 128.131517ms ago: executing program 1 (id=139): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000e80), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000ec0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001040)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000010c0)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001100)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000001140)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={r3, r1, 0x0, r0}, 0x10) 127.944927ms ago: executing program 4 (id=140): r0 = creat(&(0x7f0000001a40)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000001a80)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x2, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000001c00)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c40)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x3c) creat(&(0x7f0000001d40)='./file0\x00', 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) close_range(r3, 0xffffffffffffffff, 0x0) 74.685789ms ago: executing program 0 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000a00)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000a80)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000ac0)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 49.716029ms ago: executing program 1 (id=142): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x6, 0x4, 0x7, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000ac0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000b00), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1a, 0xf, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 0s ago: executing program 4 (id=143): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000280)=""/229, 0xe5, 0x40010010, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 22.800008][ T30] audit: type=1400 audit(1792204912.800:103): avc: denied { write } for pid=3208 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.072323][ T30] audit: type=1400 audit(1792204913.080:104): avc: denied { write } for pid=3211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.649851][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 23.649868][ T30] audit: type=1400 audit(1792204913.650:110): avc: denied { write } for pid=3255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.695892][ T30] audit: type=1400 audit(1792204913.700:111): avc: denied { write } for pid=3267 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.743480][ T30] audit: type=1400 audit(1792204913.750:112): avc: denied { transition } for pid=3270 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.743609][ T30] audit: type=1400 audit(1792204913.750:113): avc: denied { noatsecure } for pid=3270 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.744063][ T30] audit: type=1400 audit(1792204913.750:114): avc: denied { write } for pid=3270 comm="sh" path="pipe:[2450]" dev="pipefs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 23.744095][ T30] audit: type=1400 audit(1792204913.750:115): avc: denied { rlimitinh } for pid=3270 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.744150][ T30] audit: type=1400 audit(1792204913.750:116): avc: denied { siginh } for pid=3270 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts. [ 32.644537][ T30] audit: type=1400 audit(1792204922.650:117): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.644871][ T30] audit: type=1400 audit(1792204922.650:118): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.645461][ T3288] cgroup: Unknown subsys name 'net' [ 32.645719][ T30] audit: type=1400 audit(1792204922.650:119): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.792324][ T3288] cgroup: Unknown subsys name 'cpuset' [ 32.792978][ T3288] cgroup: Unknown subsys name 'rlimit' [ 32.889512][ T30] audit: type=1400 audit(1792204922.890:120): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.890563][ T30] audit: type=1400 audit(1792204922.890:121): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.890660][ T30] audit: type=1400 audit(1792204922.890:122): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.891089][ T30] audit: type=1400 audit(1792204922.890:123): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.909897][ T30] audit: type=1400 audit(1792204922.910:124): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.912853][ T30] audit: type=1400 audit(1792204922.910:125): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.948919][ T30] audit: type=1400 audit(1792204922.950:126): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.982159][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.030377][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.067093][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.067442][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.067689][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.069053][ T3303] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.143513][ T3306] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.160636][ T3299] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.167863][ T3304] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.190625][ T3300] infiniband rxe0: set active [ 34.190639][ T3300] infiniband rxe0: added rxe_eth0 [ 34.191008][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.210653][ T3300] RDS/IB: rxe0: added [ 34.210672][ T3300] smc: adding ib device rxe0 with port count 1 [ 34.210686][ T3300] smc: ib device rxe0 port 1 has no pnetid [ 34.211150][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.251123][ T3082] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.278746][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.331469][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.380725][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.429902][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.429946][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.430031][ T3303] bridge_slave_0: entered allmulticast mode [ 34.430646][ T3303] bridge_slave_0: entered promiscuous mode [ 34.462692][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.462765][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.462889][ T3303] bridge_slave_1: entered allmulticast mode [ 34.463527][ T3303] bridge_slave_1: entered promiscuous mode [ 34.488930][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.518605][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.519893][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.554240][ T3303] team0: Port device team_slave_0 added [ 34.574567][ T3303] team0: Port device team_slave_1 added [ 34.589483][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.589551][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.589614][ T3306] bridge_slave_0: entered allmulticast mode [ 34.590044][ T3306] bridge_slave_0: entered promiscuous mode [ 34.590840][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.590904][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.590931][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.591542][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.591633][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.591919][ T3306] bridge_slave_1: entered allmulticast mode [ 34.592977][ T3306] bridge_slave_1: entered promiscuous mode [ 34.652608][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.676628][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.677137][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.677175][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.677270][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.752027][ T3306] team0: Port device team_slave_0 added [ 34.752976][ T3306] team0: Port device team_slave_1 added [ 34.781579][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.781595][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.804876][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.830436][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.830449][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.830478][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.858217][ T3303] hsr_slave_0: entered promiscuous mode [ 34.859240][ T3303] hsr_slave_1: entered promiscuous mode [ 34.981025][ T3306] hsr_slave_0: entered promiscuous mode [ 34.981421][ T3306] hsr_slave_1: entered promiscuous mode [ 34.981811][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.981854][ T3306] Cannot create hsr debugfs directory [ 35.005660][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.005725][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.005783][ T3304] bridge_slave_0: entered allmulticast mode [ 35.006772][ T3304] bridge_slave_0: entered promiscuous mode [ 35.016628][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.016715][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.016960][ T3299] bridge_slave_0: entered allmulticast mode [ 35.018769][ T3299] bridge_slave_0: entered promiscuous mode [ 35.034539][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.034610][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.034821][ T3304] bridge_slave_1: entered allmulticast mode [ 35.036013][ T3304] bridge_slave_1: entered promiscuous mode [ 35.037436][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.037524][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.037779][ T3299] bridge_slave_1: entered allmulticast mode [ 35.038642][ T3299] bridge_slave_1: entered promiscuous mode [ 35.100441][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.128684][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.129711][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.130901][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.186278][ T3299] team0: Port device team_slave_0 added [ 35.187052][ T3304] team0: Port device team_slave_0 added [ 35.188149][ T3304] team0: Port device team_slave_1 added [ 35.213149][ T3299] team0: Port device team_slave_1 added [ 35.213462][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.213475][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.213557][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.237561][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.237606][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.237687][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.268138][ T3304] hsr_slave_0: entered promiscuous mode [ 35.269369][ T3304] hsr_slave_1: entered promiscuous mode [ 35.269945][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.269985][ T3304] Cannot create hsr debugfs directory [ 35.327916][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.327951][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.328044][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.345321][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.345360][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.345446][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.447902][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.449769][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.468164][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.468204][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.468278][ T3300] bridge_slave_0: entered allmulticast mode [ 35.468827][ T3300] bridge_slave_0: entered promiscuous mode [ 35.479910][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.486388][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.487700][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.493269][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.495308][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.495334][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.495569][ T3300] bridge_slave_1: entered allmulticast mode [ 35.497283][ T3300] bridge_slave_1: entered promiscuous mode [ 35.531964][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.540970][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.570662][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.586567][ T3299] hsr_slave_0: entered promiscuous mode [ 35.587072][ T3299] hsr_slave_1: entered promiscuous mode [ 35.587312][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 35.587334][ T3299] Cannot create hsr debugfs directory [ 35.588470][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.626349][ T3300] team0: Port device team_slave_0 added [ 35.639390][ T3300] team0: Port device team_slave_1 added [ 35.656351][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.656363][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.656386][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.656725][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.658470][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.674360][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.674396][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.674473][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.706982][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.716468][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.740638][ T3300] hsr_slave_0: entered promiscuous mode [ 35.742176][ T3300] hsr_slave_1: entered promiscuous mode [ 35.742743][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 35.742779][ T3300] Cannot create hsr debugfs directory [ 35.743280][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.756331][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.757627][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.766576][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.873582][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.875591][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.886943][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.893766][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.915211][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.917122][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.917623][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.919757][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.968821][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.972160][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.982510][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.988981][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.990427][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.996804][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.014366][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.016135][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.055301][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.057582][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.077489][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.079222][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.081187][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.085632][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.114085][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.116046][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.118332][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.121327][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.129540][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.129573][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.134150][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.134266][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.135543][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.140251][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.156711][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.156838][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.180173][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.180325][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.224454][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.249149][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.262880][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.267798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.267830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.289502][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.289598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.318509][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.336987][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.337023][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.373054][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.373096][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.413752][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.443060][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.453515][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.453550][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.479594][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.479644][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.616116][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.676893][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.679196][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.781190][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.800915][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.822253][ T3306] veth0_vlan: entered promiscuous mode [ 36.837312][ T3306] veth1_vlan: entered promiscuous mode [ 36.872663][ T3306] veth0_macvtap: entered promiscuous mode [ 36.874724][ T3306] veth1_macvtap: entered promiscuous mode [ 36.881533][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.902815][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.921263][ T171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.921379][ T171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.921428][ T171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.921479][ T171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.921612][ T3303] veth0_vlan: entered promiscuous mode [ 36.939359][ T3303] veth1_vlan: entered promiscuous mode [ 37.008980][ T3303] veth0_macvtap: entered promiscuous mode [ 37.017608][ T3303] veth1_macvtap: entered promiscuous mode [ 37.032302][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.040103][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.079626][ T3306] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.081933][ T32] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.082391][ T32] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.082736][ T32] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.082800][ T32] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.098330][ T3304] veth0_vlan: entered promiscuous mode [ 37.117661][ T3299] veth0_vlan: entered promiscuous mode [ 37.156841][ T3300] veth0_vlan: entered promiscuous mode [ 37.159455][ T3304] veth1_vlan: entered promiscuous mode [ 37.175418][ T3299] veth1_vlan: entered promiscuous mode [ 37.176483][ T3300] veth1_vlan: entered promiscuous mode [ 37.211454][ T3299] veth0_macvtap: entered promiscuous mode [ 37.223075][ T3304] veth0_macvtap: entered promiscuous mode [ 37.224950][ T3300] veth0_macvtap: entered promiscuous mode [ 37.226375][ T3299] veth1_macvtap: entered promiscuous mode [ 37.229706][ T3304] veth1_macvtap: entered promiscuous mode [ 37.231609][ T3300] veth1_macvtap: entered promiscuous mode [ 37.269231][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.284228][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.288449][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.290170][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.302890][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.312353][ T171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.312450][ T171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.312519][ T171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.312677][ T171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.322865][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.332520][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.333357][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.333487][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.333567][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.351996][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.352276][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.352702][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.449796][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 37.449832][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 37.511860][ T171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.537890][ T3522] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 37.635291][ T3533] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 37.688390][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 37.688410][ T30] audit: type=1400 audit(1792204927.690:175): avc: denied { allowed } for pid=3543 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.693711][ T30] audit: type=1400 audit(1792204927.690:176): avc: denied { create } for pid=3543 comm="syz.1.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.728672][ T30] audit: type=1400 audit(1792204927.730:177): avc: denied { create } for pid=3538 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.730398][ T30] audit: type=1400 audit(1792204927.730:178): avc: denied { ioctl } for pid=3538 comm="syz.3.11" path="socket:[5267]" dev="sockfs" ino=5267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.731389][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 37.736461][ T30] audit: type=1400 audit(1792204927.740:179): avc: denied { name_bind } for pid=3543 comm="syz.1.12" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.736547][ T30] audit: type=1400 audit(1792204927.740:180): avc: denied { node_bind } for pid=3543 comm="syz.1.12" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.769084][ T30] audit: type=1400 audit(1792204927.770:181): avc: denied { write } for pid=3545 comm="syz.4.13" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.769467][ T3546] loop4: detected capacity change from 0 to 512 [ 37.821150][ T3546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.829798][ T3546] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.829990][ T30] audit: type=1400 audit(1792204927.830:182): avc: denied { mount } for pid=3545 comm="syz.4.13" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.916447][ T30] audit: type=1400 audit(1792204927.920:183): avc: denied { write } for pid=3545 comm="syz.4.13" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.916482][ T30] audit: type=1400 audit(1792204927.920:184): avc: denied { add_name } for pid=3545 comm="syz.4.13" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.919274][ T3536] loop2: detected capacity change from 0 to 8192 [ 38.061968][ T32] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.086375][ T3546] syz.4.13 (3546) used greatest stack depth: 10824 bytes left [ 38.145125][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.265827][ T3570] FAULT_INJECTION: forcing a failure. [ 38.265827][ T3570] name failslab, interval 1, probability 0, space 0, times 1 [ 38.265880][ T3570] CPU: 1 UID: 0 PID: 3570 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.265914][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.265979][ T3570] Call Trace: [ 38.265988][ T3570] [ 38.266006][ T3570] __dump_stack+0x1d/0x30 [ 38.266045][ T3570] dump_stack_lvl+0x95/0xd0 [ 38.266116][ T3570] dump_stack+0x15/0x1b [ 38.266150][ T3570] should_fail_ex+0x262/0x280 [ 38.266253][ T3570] ? __register_sysctl_table+0x52/0xbe0 [ 38.266288][ T3570] should_failslab+0x8c/0xb0 [ 38.266346][ T3570] __kmalloc_noprof+0xd0/0x4d0 [ 38.266384][ T3570] ? should_fail_ex+0xdb/0x280 [ 38.266483][ T3570] ? __register_sysctl_table+0x52/0xbe0 [ 38.266516][ T3570] __register_sysctl_table+0x52/0xbe0 [ 38.266551][ T3570] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 38.266616][ T3570] ? ipv4_sysctl_init_net+0x3a/0x240 [ 38.266682][ T3570] ? ipv4_sysctl_init_net+0x3a/0x240 [ 38.266760][ T3570] register_net_sysctl_sz+0x118/0x190 [ 38.266948][ T3570] ipv4_sysctl_init_net+0x130/0x240 [ 38.266989][ T3570] ops_init+0x22a/0x2e0 [ 38.267024][ T3570] setup_net+0x9f/0x230 [ 38.267081][ T3570] copy_net_ns+0x333/0x490 [ 38.267183][ T3570] create_new_namespaces+0x1f6/0x420 [ 38.267216][ T3570] unshare_nsproxy_namespaces+0x115/0x150 [ 38.267294][ T3570] ksys_unshare+0x3fd/0x6f0 [ 38.267333][ T3570] __x64_sys_unshare+0x1f/0x30 [ 38.267426][ T3570] x64_sys_call+0x1e33/0x2550 [ 38.267455][ T3570] do_syscall_64+0x112/0x360 [ 38.267523][ T3570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.267614][ T3570] RIP: 0033:0x7f46db11e559 [ 38.267635][ T3570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.267658][ T3570] RSP: 002b:00007f46d9b77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 38.267685][ T3570] RAX: ffffffffffffffda RBX: 00007f46db3a5fa0 RCX: 00007f46db11e559 [ 38.267747][ T3570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 38.267774][ T3570] RBP: 00007f46db1b5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 38.267787][ T3570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.267799][ T3570] R13: 00007f46db3a6038 R14: 00007f46db3a5fa0 R15: 00007ffc0b97e0a8 [ 38.267822][ T3570] [ 38.583187][ T3539] syz.3.11 (3539) used greatest stack depth: 10656 bytes left [ 38.834955][ T3583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 38.993226][ T3596] ip_tables: iptables: counters copy to user failed while replacing table [ 39.011353][ T3593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.28'. [ 39.078404][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.078579][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.251300][ T3596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.263377][ T3596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.439146][ T3599] syzkaller1: entered promiscuous mode [ 39.439169][ T3599] syzkaller1: entered allmulticast mode [ 39.481726][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.482395][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.502106][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.503382][ T32] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.540326][ T3609] loop1: detected capacity change from 0 to 512 [ 39.540890][ T3609] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.540902][ T3609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.540943][ T3609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.540960][ T3609] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 39.776333][ T3622] FAULT_INJECTION: forcing a failure. [ 39.776333][ T3622] name failslab, interval 1, probability 0, space 0, times 0 [ 39.776375][ T3622] CPU: 0 UID: 0 PID: 3622 Comm: syz.4.37 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.776427][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.776444][ T3622] Call Trace: [ 39.776452][ T3622] [ 39.776459][ T3622] __dump_stack+0x1d/0x30 [ 39.776491][ T3622] dump_stack_lvl+0x95/0xd0 [ 39.776521][ T3622] dump_stack+0x15/0x1b [ 39.776576][ T3622] should_fail_ex+0x262/0x280 [ 39.776618][ T3622] ? avtab_insert_nonunique+0x325/0x460 [ 39.776656][ T3622] should_failslab+0x8c/0xb0 [ 39.776718][ T3622] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 39.776768][ T3622] ? avtab_insert_nonunique+0x325/0x460 [ 39.776889][ T3622] avtab_insert_nonunique+0x325/0x460 [ 39.776930][ T3622] cond_dup_av_list+0xac/0x160 [ 39.777035][ T3622] cond_policydb_dup+0x307/0x4d0 [ 39.777069][ T3622] security_set_bools+0xa1/0x350 [ 39.777105][ T3622] sel_commit_bools_write+0x1e9/0x270 [ 39.777223][ T3622] vfs_writev+0x420/0x8c0 [ 39.777256][ T3622] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 39.777318][ T3622] do_writev+0xe9/0x210 [ 39.777350][ T3622] __x64_sys_writev+0x45/0x50 [ 39.777370][ T3622] x64_sys_call+0x23c9/0x2550 [ 39.777409][ T3622] do_syscall_64+0x112/0x360 [ 39.777447][ T3622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.777477][ T3622] RIP: 0033:0x7fccd21ae559 [ 39.777507][ T3622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.777543][ T3622] RSP: 002b:00007fccd0c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 39.777570][ T3622] RAX: ffffffffffffffda RBX: 00007fccd2435fa0 RCX: 00007fccd21ae559 [ 39.777615][ T3622] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000005 [ 39.777633][ T3622] RBP: 00007fccd2245ab8 R08: 0000000000000000 R09: 0000000000000000 [ 39.777649][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.777664][ T3622] R13: 00007fccd2436038 R14: 00007fccd2435fa0 R15: 00007fff4bb27b48 [ 39.777721][ T3622] [ 39.988973][ T3623] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.090047][ T3627] loop2: detected capacity change from 0 to 256 [ 40.322616][ T3640] loop1: detected capacity change from 0 to 1024 [ 40.340127][ T3640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.379726][ T3640] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.470932][ T3645] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 40.585730][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.602041][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.602630][ T3645] bridge_slave_0 (unregistering): left allmulticast mode [ 40.602648][ T3645] bridge_slave_0 (unregistering): left promiscuous mode [ 40.602701][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.762695][ T3650] loop4: detected capacity change from 0 to 512 [ 40.763261][ T3650] EXT4-fs: Ignoring removed nobh option [ 40.767924][ T3650] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 40.787064][ T3650] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #3: comm syz.4.47: corrupted inode contents [ 40.787186][ T3650] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.789079][ T3650] EXT4-fs (loop4): Remounting filesystem read-only [ 40.791707][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 40.791747][ C1] EXT4-fs (loop4): initial error at time 1792204930: ext4_do_update_inode:5801: inode 3 [ 40.791828][ C1] EXT4-fs (loop4): last error at time 1792204930: ext4_do_update_inode:5801: inode 3 [ 40.794478][ T3650] EXT4-fs (loop4): 1 truncate cleaned up [ 40.795679][ T3650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.800504][ T3650] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.924374][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 40.961028][ T3650] syz.4.47 (3650) used greatest stack depth: 10104 bytes left [ 40.979553][ T3661] Zero length message leads to an empty skb [ 41.013267][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.585338][ T3694] loop2: detected capacity change from 0 to 512 [ 41.585812][ T3694] EXT4-fs: Ignoring removed nobh option [ 41.586874][ T3694] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 41.617010][ T3694] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #3: comm syz.2.65: corrupted inode contents [ 41.617034][ T3694] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 41.620569][ T3694] EXT4-fs (loop2): Remounting filesystem read-only [ 41.621669][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 41.621689][ C1] EXT4-fs (loop2): initial error at time 1792204931: ext4_do_update_inode:5801: inode 3 [ 41.621724][ C1] EXT4-fs (loop2): last error at time 1792204931: ext4_do_update_inode:5801: inode 3 [ 41.679894][ T3694] EXT4-fs (loop2): 1 truncate cleaned up [ 41.680642][ T3694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.680725][ T3694] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.760824][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 41.767363][ T3696] loop3: detected capacity change from 0 to 4096 [ 41.768169][ T3696] EXT4-fs: Ignoring removed nobh option [ 41.768306][ T3696] EXT4-fs: test_dummy_encryption option not supported [ 41.869144][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.038236][ T3714] TC_ACT_REPEAT abuse ? [ 42.188640][ T3725] netlink: 'syz.4.76': attribute type 2 has an invalid length. [ 42.208914][ T3725] 0: entered promiscuous mode [ 42.399643][ T3734] loop2: detected capacity change from 0 to 512 [ 42.416757][ T3734] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 42.416787][ T3734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.460056][ T3734] EXT4-fs (loop2): 1 truncate cleaned up [ 42.475376][ T3734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.559757][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 42.574754][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 42.591816][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.591894][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.591968][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.592010][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.792804][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 42.792823][ T30] audit: type=1400 audit(1792204932.800:302): avc: denied { create } for pid=3745 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 42.799522][ T30] audit: type=1400 audit(1792204932.800:303): avc: denied { ioctl } for pid=3745 comm="syz.0.83" path="socket:[3972]" dev="sockfs" ino=3972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 42.801030][ T30] audit: type=1400 audit(1792204932.800:304): avc: denied { getopt } for pid=3745 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 43.373641][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.391443][ T3757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 43.391568][ T3757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 43.401707][ T30] audit: type=1400 audit(1792204933.400:305): avc: denied { create } for pid=3756 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.448361][ T3761] capability: warning: `syz.4.89' uses 32-bit capabilities (legacy support in use) [ 43.477622][ T30] audit: type=1400 audit(1792204933.480:306): avc: denied { mount } for pid=3760 comm="syz.4.89" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 43.644742][ T30] audit: type=1400 audit(1792204933.640:307): avc: denied { perfmon } for pid=3767 comm="syz.2.93" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.752131][ T3381] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.794800][ T30] audit: type=1400 audit(1792204933.800:308): avc: denied { read } for pid=3773 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.794831][ T30] audit: type=1400 audit(1792204933.800:309): avc: denied { read open } for pid=3773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.794893][ T30] audit: type=1400 audit(1792204933.800:310): avc: denied { getattr } for pid=3773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.830752][ T3755] loop3: detected capacity change from 0 to 512 [ 43.981579][ T3755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.985057][ T3755] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.993522][ T3778] FAULT_INJECTION: forcing a failure. [ 43.993522][ T3778] name failslab, interval 1, probability 0, space 0, times 0 [ 43.993560][ T3778] CPU: 0 UID: 0 PID: 3778 Comm: syz.4.95 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.993609][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.993624][ T3778] Call Trace: [ 43.993633][ T3778] [ 43.993642][ T3778] __dump_stack+0x1d/0x30 [ 43.993747][ T3778] dump_stack_lvl+0x95/0xd0 [ 43.993854][ T3778] dump_stack+0x15/0x1b [ 43.993917][ T3778] should_fail_ex+0x262/0x280 [ 43.994046][ T3778] ? alloc_vfsmnt+0x5d/0x380 [ 43.994138][ T3778] should_failslab+0x8c/0xb0 [ 43.994288][ T3778] __kmalloc_cache_noprof+0x7a/0x400 [ 43.994390][ T3778] ? alloc_vfsmnt+0x5d/0x380 [ 43.994480][ T3778] alloc_vfsmnt+0x5d/0x380 [ 43.994641][ T3778] clone_mnt+0x30/0x610 [ 43.994714][ T3778] ? copy_tree+0xa3/0x8a0 [ 43.994813][ T3778] copy_tree+0xb9/0x8a0 [ 43.994912][ T3778] ? proc_alloc_inum+0x4f/0x70 [ 43.995027][ T3778] ? __ns_common_init+0xd7/0x120 [ 43.995086][ T3778] ? __ns_tree_gen_id+0x48/0x60 [ 43.995214][ T3778] copy_mnt_ns+0x1d2/0x720 [ 43.995323][ T3778] create_new_namespaces+0x7f/0x420 [ 43.995429][ T3778] unshare_nsproxy_namespaces+0x115/0x150 [ 43.995469][ T3778] ksys_unshare+0x3fd/0x6f0 [ 43.995590][ T3778] __x64_sys_unshare+0x1f/0x30 [ 43.995677][ T3778] x64_sys_call+0x1e33/0x2550 [ 43.995767][ T3778] do_syscall_64+0x112/0x360 [ 43.995976][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.996047][ T3778] RIP: 0033:0x7fccd21ae559 [ 43.996091][ T3778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.996140][ T3778] RSP: 002b:00007fccd0c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 43.996200][ T3778] RAX: ffffffffffffffda RBX: 00007fccd2435fa0 RCX: 00007fccd21ae559 [ 43.996249][ T3778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 43.996374][ T3778] RBP: 00007fccd2245ab8 R08: 0000000000000000 R09: 0000000000000000 [ 43.996415][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.996455][ T3778] R13: 00007fccd2436038 R14: 00007fccd2435fa0 R15: 00007fff4bb27b48 [ 43.996560][ T3778] [ 44.134483][ T30] audit: type=1400 audit(1792204934.140:311): avc: denied { bpf } for pid=3754 comm="syz.3.86" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.278160][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.692902][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.868117][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 44.931926][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.952697][ T3806] FAULT_INJECTION: forcing a failure. [ 44.952697][ T3806] name failslab, interval 1, probability 0, space 0, times 0 [ 44.952726][ T3806] CPU: 0 UID: 0 PID: 3806 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.952753][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.952767][ T3806] Call Trace: [ 44.952775][ T3806] [ 44.952785][ T3806] __dump_stack+0x1d/0x30 [ 44.952823][ T3806] dump_stack_lvl+0x95/0xd0 [ 44.952851][ T3806] dump_stack+0x15/0x1b [ 44.952878][ T3806] should_fail_ex+0x262/0x280 [ 44.952919][ T3806] ? alloc_mnt_ns+0x75/0x250 [ 44.952945][ T3806] should_failslab+0x8c/0xb0 [ 44.952986][ T3806] __kmalloc_cache_noprof+0x7a/0x400 [ 44.953064][ T3806] ? alloc_mnt_ns+0x75/0x250 [ 44.953123][ T3806] alloc_mnt_ns+0x75/0x250 [ 44.953150][ T3806] copy_mnt_ns+0x135/0x720 [ 44.953177][ T3806] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 44.953217][ T3806] ? create_new_namespaces+0x38/0x420 [ 44.953406][ T3806] create_new_namespaces+0x7f/0x420 [ 44.953455][ T3806] unshare_nsproxy_namespaces+0x115/0x150 [ 44.953502][ T3806] ksys_unshare+0x3fd/0x6f0 [ 44.953657][ T3806] __x64_sys_unshare+0x1f/0x30 [ 44.953729][ T3806] x64_sys_call+0x1e33/0x2550 [ 44.953764][ T3806] do_syscall_64+0x112/0x360 [ 44.953802][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.953903][ T3806] RIP: 0033:0x7fd9aeefe559 [ 44.953925][ T3806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.953955][ T3806] RSP: 002b:00007fd9ad957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 44.953981][ T3806] RAX: ffffffffffffffda RBX: 00007fd9af185fa0 RCX: 00007fd9aeefe559 [ 44.954051][ T3806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 44.954141][ T3806] RBP: 00007fd9aef95ab8 R08: 0000000000000000 R09: 0000000000000000 [ 44.954158][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.954252][ T3806] R13: 00007fd9af186038 R14: 00007fd9af185fa0 R15: 00007fffebb9b068 [ 44.954275][ T3806] [ 45.345998][ T3813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.346146][ T3813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.576106][ T3831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.113'. [ 45.659465][ T3390] bridge0: entered promiscuous mode [ 45.733189][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.024057][ T3848] syz_tun: entered allmulticast mode [ 46.040859][ T3847] syz_tun: left allmulticast mode [ 46.098547][ T3850] loop0: detected capacity change from 0 to 2048 [ 46.126458][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.157775][ T3857] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 46.174422][ T3857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.217586][ T3857] bond1: (slave geneve2): making interface the new active one [ 46.222417][ T3857] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 46.267177][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.353749][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 46.470748][ T3874] loop3: detected capacity change from 0 to 512 [ 46.475021][ T3874] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 46.475118][ T3874] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.477560][ T3874] EXT4-fs (loop3): 1 truncate cleaned up [ 46.478657][ T3874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.772790][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.808519][ T3906] uprobe: syz.4.140:3906 failed to unregister, leaking uprobe [ 46.856004][ T3846] ================================================================== [ 46.856045][ T3846] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 46.856077][ T3846] [ 46.856082][ T3846] write to 0xffff88810d1110a0 of 8 bytes by task 3840 on cpu 0: [ 46.856100][ T3846] shmem_file_splice_read+0x401/0x590 [ 46.856130][ T3846] splice_direct_to_actor+0x261/0x680 [ 46.856160][ T3846] do_splice_direct+0x119/0x1a0 [ 46.856187][ T3846] do_sendfile+0x37d/0x640 [ 46.856208][ T3846] __x64_sys_sendfile64+0x105/0x150 [ 46.856229][ T3846] x64_sys_call+0x1015/0x2550 [ 46.856253][ T3846] do_syscall_64+0x112/0x360 [ 46.856283][ T3846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.856311][ T3846] [ 46.856318][ T3846] write to 0xffff88810d1110a0 of 8 bytes by task 3846 on cpu 1: [ 46.856333][ T3846] shmem_file_splice_read+0x401/0x590 [ 46.856354][ T3846] splice_direct_to_actor+0x261/0x680 [ 46.856376][ T3846] do_splice_direct+0x119/0x1a0 [ 46.856403][ T3846] do_sendfile+0x37d/0x640 [ 46.856423][ T3846] __x64_sys_sendfile64+0x105/0x150 [ 46.856445][ T3846] x64_sys_call+0x1015/0x2550 [ 46.856478][ T3846] do_syscall_64+0x112/0x360 [ 46.856511][ T3846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.856531][ T3846] [ 46.856535][ T3846] value changed: 0x0000000000007541 -> 0x0000000000007544 [ 46.856545][ T3846] [ 46.856549][ T3846] Reported by Kernel Concurrency Sanitizer on: [ 46.856559][ T3846] CPU: 1 UID: 0 PID: 3846 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.856588][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 46.856600][ T3846] ================================================================== [ 47.148542][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.742012][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.811800][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.852284][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.653724][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.891800][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.293319][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.931971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.933414][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.935023][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.981775][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.011992][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.332252][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.051802][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.092921][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.131843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.374705][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog