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", 0x1000}, {&(0x7f00000000c0)="8249001aefaca4865bd232fcf2d5ea7a87e942ca93593d7c1fb80281c9", 0x1d}, {&(0x7f00000033c0)="172b36215f4f7efa6d2fc16ac51639cc710e396b9c4c41f031fb00addb4bb9c0b6d5811aea432a7feb7b04c385c42995dec8970c2fd950a153d41ffd9ba087eee8ef", 0x42}], 0x9, 0x400000, 0x1)

06:50:47 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00')
fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0)

06:50:47 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0xfffffffffffffffd)

06:50:47 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

06:50:47 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8901, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0})

[ 1447.878874][   T28] audit: type=1800 audit(1601275847.888:261): pid=21909 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=16258 res=0 errno=0
06:50:48 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r1, 0x0, 0x0, 0xe)

06:50:48 executing program 0:
r0 = eventfd(0xdffffffe)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfffffd4a)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00009b1ffc))
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000016)

06:50:48 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
fstatfs(r1, &(0x7f0000000040)=""/35)

06:50:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname(r0, &(0x7f0000002dc0)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80)
fcntl$getownex(r1, 0x10, &(0x7f0000001200))

06:50:48 executing program 1:
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x10842, 0x0)
write$nbd(r0, 0x0, 0x0)

06:50:48 executing program 2:
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x14)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/243})
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth1_to_bridge\x00', &(0x7f00000002c0)=@ethtool_rx_ntuple={0x35, {0x8, @usr_ip4_spec={@multicast2, @local, 0x1, 0x2, 0x1, 0xfe}, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, 0x3, 0x2}, 0x8, 0x4, 0x6d2, 0x3b}}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000003c0))
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00')
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000440))
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x400, 0x0)
signalfd(r4, &(0x7f00000004c0)={[0x5b3f]}, 0x8)
ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000500))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'wg1\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x0, 0x0, 0x401, "13a1f57b4154"}})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
r5 = syz_open_pts(r0, 0x80000)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000600)={0x1, 0xd30, 0x8, 0x3, 0x20, "b04f1ded485c4619076c9db0d01b0f41d0fbdf", 0x80, 0x1000})
syz_open_pts(0xffffffffffffffff, 0x282cc0)

06:50:48 executing program 3:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_type(r0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000480)=""/13, 0xd, 0x40, 0x0, 0x0)

06:50:48 executing program 1:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
write$P9_RREADDIR(r0, &(0x7f0000000000)={0xffffffffffffffe4}, 0xfffffd1b)

06:50:48 executing program 4:
r0 = socket(0x1, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
getpgid(r1)

06:50:48 executing program 0:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$P9_RMKDIR(r0, 0x0, 0x0)

06:50:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x0)

[ 1448.697611][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:48 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000280)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x7e30}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x20}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:48 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0)

06:50:48 executing program 2:
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x14)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/243})
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth1_to_bridge\x00', &(0x7f00000002c0)=@ethtool_rx_ntuple={0x35, {0x8, @usr_ip4_spec={@multicast2, @local, 0x1, 0x2, 0x1, 0xfe}, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev, 0x3, 0x2}, 0x8, 0x4, 0x6d2, 0x3b}}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000003c0))
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00')
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000440))
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x400, 0x0)
signalfd(r4, &(0x7f00000004c0)={[0x5b3f]}, 0x8)
ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000500))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'wg1\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x0, 0x0, 0x401, "13a1f57b4154"}})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
r5 = syz_open_pts(r0, 0x80000)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000600)={0x1, 0xd30, 0x8, 0x3, 0x20, "b04f1ded485c4619076c9db0d01b0f41d0fbdf", 0x80, 0x1000})
syz_open_pts(0xffffffffffffffff, 0x282cc0)

06:50:48 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
statx(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x80, &(0x7f0000000040))

06:50:48 executing program 0:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RSTAT(r0, &(0x7f0000000180)={0x62, 0x7d, 0x0, {0x0, 0x5b, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xa, '/dev/full\x00', 0xa, '/dev/full\x00', 0xa, '/dev/full\x00', 0xa, '/dev/full\x00'}}, 0x62)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x240001, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
tkill(r1, 0x13)

06:50:48 executing program 3:
r0 = socket$unix(0x1, 0x20000000001, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x5421, &(0x7f0000000140))

06:50:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCGETS(r0, 0x5401, 0x0)

06:50:48 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, 0x0)

06:50:48 executing program 2:
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
sendfile(r0, r1, 0x0, 0x0)

06:50:48 executing program 1:
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)

06:50:48 executing program 3:
r0 = socket$unix(0x1, 0x3, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)

06:50:48 executing program 0:
r0 = eventfd(0x0)
write(r0, &(0x7f0000000000)="abbefe935e3d03ef", 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "9e93d4f8"}, 0x8)
close(r0)
socket(0x1, 0x3, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

[ 1449.016405][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:49 executing program 4:
r0 = epoll_create(0x5)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0)

06:50:49 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x5451, 0x0)

06:50:49 executing program 5:
open$dir(&(0x7f0000000000)='.\x00', 0x511200, 0x0)

06:50:49 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond0\x00', {0x2, 0x0, @initdev}})
r1 = getpgid(0x0)
setpriority(0x0, r1, 0x3)
r2 = semget(0x1, 0x3, 0x7b4)
semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f0000000040)=""/166)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
write$P9_RGETLOCK(r3, &(0x7f0000000180)={0x24, 0x37, 0x1, {0x2, 0x200, 0x1, r4, 0x6, 'bond0\x00'}}, 0x24)
r5 = dup2(r0, r3)
r6 = accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80800)
recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/22, 0x16}], 0x9, &(0x7f0000000780)=""/225, 0xe1}, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x8)

06:50:49 executing program 3:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETATTR(r0, 0x0, 0x0)

06:50:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x18)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00')
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '/-&!^}\x00'}, &(0x7f0000000180)=""/194, 0xc2)

06:50:49 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
write$P9_RRENAMEAT(r1, 0x0, 0x16)

06:50:49 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00')
write$P9_RLCREATE(r0, &(0x7f0000000100)={0x18}, 0x18)

06:50:49 executing program 1:
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x657, 0xfeffffff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x5450, 0x0)

06:50:49 executing program 3:
r0 = epoll_create1(0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5421, &(0x7f0000000300))

06:50:49 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0))

06:50:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00')
sync()
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

[ 1449.745903][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:49 executing program 3:
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x12041, 0x0)
write$cgroup_pid(r0, 0x0, 0x0)

06:50:49 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
dup3(r0, r1, 0x0)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

06:50:49 executing program 4:
r0 = semget(0xffffffffffffffff, 0x8, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

06:50:49 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RMKNOD(r1, 0x0, 0x0)

06:50:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40, 0x0)
close(r0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/net\x00')
fsync(r1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7)

06:50:49 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = semget$private(0x0, 0x2, 0x20)
shmctl$IPC_RMID(r2, 0x0)
semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000000c0)=""/226)
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x2041)
r4 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x468641, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
dup2(r5, r4)
recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$netlink(r4, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc)
r6 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000240)="f1ae6f3b8b406b223a3ee7309959", 0xe, 0xfffffffffffffffd)
keyctl$revoke(0x3, r6)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000340))
r7 = add_key(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000001c0)="727e66b028d60bd806763bb955cf3989645e587064c652f62e46ea7a81decc188fbf94500a3c4d7bf1d22f617f7c9cd542f3fdd06e548a8282488583b83cb0ae3192e1f031a72719ae7ef66d251def7c51ea2c5cfb7dd0135640c50876d98c60845df34330235fb3a9", 0x69, 0xffffffffffffffff)
keyctl$search(0xa, r7, &(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, 0xfffffffffffffffe)
keyctl$instantiate(0xc, r6, &(0x7f0000000680)=ANY=[@ANYBLOB="6e4b0020646574207573657272300f3030303030303030303030308bddff0000782fbdf6ef8700000000925b3238d1", @ANYRES16=r0, @ANYRES16=r7, @ANYRESHEX=r6], 0x28, 0x0)
dup3(r1, r3, 0x0)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000300)={0x25b, 0x5, 0x77, 0x26}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tp, &(0x7f0000000040)=0xbc)

06:50:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000040))

06:50:49 executing program 3:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup3(r0, r1, 0x0)
write$P9_RWRITE(r2, 0x0, 0x0)

06:50:49 executing program 0:
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xff0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
pipe2(0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f00000000c0)={0x3, 'vlan0\x00'})

06:50:49 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:50:49 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x101, 0x0, 0x0)

06:50:50 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)

06:50:50 executing program 2:
r0 = eventfd2(0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x5451, 0x0)

[ 1450.775109][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:50 executing program 4:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000006880)='./file0\x00', 0x8beb71e1529ac065, 0x0)
write$P9_RMKDIR(r0, 0x0, 0x0)

06:50:50 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x87)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)

06:50:50 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x42)

06:50:50 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
write$P9_RREAD(r1, 0x0, 0x0)

06:50:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xaa642, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

06:50:50 executing program 0:
open(&(0x7f0000000500)='./file1\x00', 0x142, 0x0)
open(&(0x7f0000007cc0)='./file1\x00', 0x4000, 0x140)

06:50:50 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00')
write$P9_RXATTRWALK(r0, 0x0, 0x32)

06:50:50 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x8, 'vxcan1\x00', {'sit0\x00'}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x155642, 0x0)
fcntl$getflags(r0, 0x0)

06:50:51 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
dup(r2)

06:50:51 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000100)='/', r0, &(0x7f0000000040)='./file0\x00')
symlinkat(&(0x7f0000000480)='./file0/file0\x00', r0, &(0x7f00000004c0)='./file0/file0\x00')

[ 1450.937290][   T28] audit: type=1804 audit(1601275850.948:262): pid=22089 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file1" dev="sda1" ino=16375 res=1 errno=0
06:50:51 executing program 3:
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RLERROR(r1, &(0x7f0000000040)={0x7f, 0x7, 0x0, {0x76, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f'}}, 0x7f)
read$eventfd(r1, &(0x7f0000000000), 0x8)

06:50:51 executing program 1:
r0 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
setreuid(0x0, 0xee01)
fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

06:50:51 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080))

06:50:51 executing program 5:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0)
openat$cgroup(r0, &(0x7f0000002f00)='syz1\x00', 0x200002, 0x0)

06:50:51 executing program 2:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

06:50:51 executing program 0:
r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
r2 = eventfd(0x0)
syncfs(r2)
getdents64(r1, &(0x7f0000002040)=""/102400, 0xfffffffffffffd87)

06:50:51 executing program 1:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451)

06:50:51 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
ioctl$CHAR_RAW_SECTGET(r0, 0x5450, 0x0)

06:50:51 executing program 3:
r0 = socket(0x1, 0x5, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x1b)

06:50:51 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
flistxattr(r2, 0x0, 0x0)

06:50:51 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)
ioctl(r0, 0x81000000008903, &(0x7f0000000700))

06:50:51 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000040))

06:50:51 executing program 2:
r0 = semget$private(0x0, 0x4, 0x0)
setresgid(0x0, 0xee01, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x3}})

06:50:51 executing program 3:
r0 = eventfd(0xfffffffc)
write$char_usb(r0, &(0x7f0000000240)="c626793c4c01f78c", 0x8)
r1 = gettid()
modify_ldt$read_default(0x2, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
close(r0)
syz_open_procfs(0x0, &(0x7f000012bff2)='status\x00')
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:50:51 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

06:50:51 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0xc89533a19d1e8f2e, 0x108)

06:50:51 executing program 4:
shmget(0xffffffffffffffff, 0x2000, 0x80, &(0x7f0000000000/0x2000)=nil)

06:50:51 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS(r2, 0x5450, 0x0)

06:50:51 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
close(r0)
memfd_create(&(0x7f0000000100)='\x96!@\x00', 0x0)
pread64(r0, 0x0, 0x0, 0x0)

06:50:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x8901, &(0x7f0000000380))

06:50:51 executing program 3:
pselect6(0xa3, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0)

06:50:51 executing program 4:
shmget(0xffffffffffffffff, 0x2000, 0x80, &(0x7f0000000000/0x2000)=nil)

06:50:51 executing program 1:
setgroups(0x0, &(0x7f0000000000))

06:50:51 executing program 2:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x80, 0x80000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0))
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000280)=[{r3}, {r0, 0x9101}, {r1, 0x2001}], 0x3, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x100000001]}, 0x8)
lseek(r2, 0xad, 0x7)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340))
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
set_mempolicy(0x8000, &(0x7f0000000380)=0x2, 0x3)
r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
preadv2(r4, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/127, 0x7f}, {&(0x7f0000000840)=""/29, 0x1d}, {&(0x7f0000000880)=""/106, 0x6a}], 0x9, 0x8, 0x7, 0x8)
lsetxattr$trusted_overlay_nlink(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='trusted.overlay.nlink\x00', &(0x7f0000000a40)={'L+', 0x5}, 0x16, 0x2)
ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000a80))
truncate(&(0x7f0000000ac0)='./file0\x00', 0x4)
r5 = socket(0x22, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000b00)=""/227, &(0x7f0000000c00)=0xe3)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000c40))

06:50:51 executing program 4:
r0 = eventfd2(0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, 0x0)

06:50:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
write$P9_RREADLINK(r0, 0x0, 0x10)

06:50:51 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="2fa30b86560ade30954a085347e87281ed4ae0ebdd914a1049ff6105b97279b6fadb832a266988bceb6ac8fcb39e95dbd07b8be37e37f84d341055626c12ef54aee412f1c018b40aea22f9eba145249c5677248d6d6838280b7bc743faffb9e309518268ee18ce94076cdbb6cce4e83c16bd358ec9817e85f7adfe3a612ee08ebc385cea25acac9475291f41ee8dbd6983843158c2fdeb51e6ea1f67255a194550f48f85c65bb8f729be810be8dfb4deb45fdbf9990666ca85857d7134d938c3125bb288b27374fdc03a9540f4caebe63aded8c71f89a5894d8f794afb2032e5318cf4af08acb507511ce583d4b833fb8ecc06f8e54cade80c8898ea1aab711b86", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:50:51 executing program 5:
open(&(0x7f0000001640)='./file0\x00', 0x870596b8a612a87f, 0x10e)

06:50:51 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x5450, 0x0)

06:50:51 executing program 1:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwritev2(r0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x5)

06:50:51 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10)

06:50:51 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)
fchmod(r0, 0x0)
r1 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\x19%\x15\xbc\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\xff\x00\x00\x00\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4\x00\x00\x00\x00\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setuid(r2)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
pread64(r1, &(0x7f0000000180)=""/193, 0xc1, 0x1ff)
syz_open_procfs$namespace(0x0, 0x0)

06:50:51 executing program 0:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r0, 0x409, 0x5)
write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7}, 0x7)

06:50:51 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040), 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0x5451, 0x0)

[ 1451.481389][   T28] audit: type=1804 audit(1601275851.488:263): pid=22173 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="file0" dev="sda1" ino=16242 res=1 errno=0
06:50:51 executing program 3:
r0 = open(&(0x7f0000000640)='./file0\x00', 0x20042, 0x0)
write$P9_RLERRORu(r0, 0x0, 0x0)

06:50:51 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
write$P9_RWRITE(r0, 0x0, 0x0)

06:50:51 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
dup(r0)

06:50:51 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0))

[ 1451.562386][   T28] audit: type=1804 audit(1601275851.568:264): pid=22188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=16257 res=1 errno=0
06:50:51 executing program 1:
r0 = epoll_create(0x2)
r1 = epoll_create(0x2)
r2 = dup3(r0, r1, 0x0)
r3 = fcntl$getown(r2, 0x9)
fcntl$setown(r2, 0x8, r3)

[ 1451.603450][   T28] audit: type=1804 audit(1601275851.568:265): pid=22190 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=16257 res=1 errno=0
06:50:51 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640)='/proc/thread-self\x00', 0x0, 0x0)
close(r0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
writev(r0, 0x0, 0x0)

06:50:51 executing program 3:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:50:51 executing program 4:
r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabNn`\x00\x00', 0x0)
write$cgroup_pid(r0, &(0x7f0000000040), 0x12)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000140), 0xa5ff)
mount$9p_virtio(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, 0x0)

06:50:51 executing program 2:
open(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
dup2(r0, r1)
lseek(r1, 0x0, 0x0)

06:50:51 executing program 0:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_SET(r0, 0x1, 0x0)

06:50:51 executing program 1:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

06:50:51 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x345a1fec5265334d, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5450, 0x0)

06:50:51 executing program 2:
mknod$loop(0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f00000000c0))

06:50:51 executing program 3:
r0 = inotify_init1(0x0)
close(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
fremovexattr(r3, &(0x7f0000000080)=@known='user.syz\x00')

06:50:51 executing program 2:
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='security.ima\x00', 0x0, 0xfffffffffffffde0, 0x0)

06:50:51 executing program 1:
memfd_create(&(0x7f0000000080)='\x00', 0x0)
creat(&(0x7f00000005c0)='./file0\x00', 0x0)
mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
exit(0x0)
sync()
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file1\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x5451, 0x0)

06:50:51 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
write$P9_RFLUSH(r0, 0x0, 0x0)

[ 1451.817932][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1451.845624][   T28] audit: type=1804 audit(1601275851.858:266): pid=22225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16234 res=1 errno=0
06:50:51 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x8c0, 0x0)

06:50:51 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001240)='/dev/full\x00', 0x1, 0x0)
write$P9_RCLUNK(r0, 0x0, 0x0)

06:50:51 executing program 2:
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
sendmsg$inet(r0, 0x0, 0x0)

06:50:51 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
write$binfmt_script(r0, 0x0, 0x0)

06:50:51 executing program 3:
r0 = inotify_init1(0x0)
close(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
fremovexattr(r3, &(0x7f0000000080)=@known='user.syz\x00')

[ 1451.912007][   T28] audit: type=1804 audit(1601275851.888:267): pid=22226 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16234 res=1 errno=0
06:50:52 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x5451, 0x0)

06:50:52 executing program 2:
r0 = epoll_create(0x802)
close(r0)
r1 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x163)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000280)={'vlan1\x00', 0x6})
sync()
pipe2(&(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x800)
write$P9_RLERRORu(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000007edfffffffe01000014e16ed98f674cc4a423ee89a4ea4ab16cfd430f812c4efa668831e5c0dd594cfdec47933422f9c2ce6f7138f17d3210a4751c707f5e602c50361395b15dbae18c53d40ab2d3d1529040aeb7fc39bbcdfd4b700c9c61165747516f70473e1675a62009fbe829970f160aa5e36cade848a64bba029cf0cecee1f90b1ef504f163b8720305bb4668217d69ffc5955b53592e7d8d3d9a5128cca71f20469e40998865827172df25e9a881cf41"], 0xd)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000280))
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000340))
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x0, 0x3, 0x7fff})
mkdir(&(0x7f0000001080)='./file0\x00', 0xc0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)='trusted.overy.redirect\x00\x00\x00', 0xffffffffffffff73, 0x3)
symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file1\x00')
lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0xffffffffffffffed, 0x0)

06:50:52 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
write$cgroup_int(r0, 0x0, 0x0)

06:50:52 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}, {0x4, 0x1c}], 0x2)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7f6e}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x7}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1452.007181][   T28] audit: type=1804 audit(1601275852.018:268): pid=22244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16277 res=1 errno=0
06:50:52 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="2fa30b86560ade30954a085347e87281ed4ae0ebdd914a1049ff6105b97279b6fadb832a266988bceb6ac8fcb39e95dbd07b8be37e37f84d341055626c12ef54aee412f1c018b40aea22f9eba145249c5677248d6d6838280b7bc743faffb9e309518268ee18ce94076cdbb6cce4e83c16bd358ec9817e85f7adfe3a612ee08ebc385cea25acac9475291f41ee8dbd6983843158c2fdeb51e6ea1f67255a194550f48f85c65bb8f729be810be8dfb4deb45fdbf9990666ca85857d7134d938c3125bb288b27374fdc03a9540f4caebe63aded8c71f89a5894d8f794afb2032e5318cf4af08acb507511ce583d4b833fb8ecc06f8e54cade80c", 0xf9, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r1 = socket$unix(0x1, 0x1000000000001, 0x0)
syncfs(r1)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x5451)

[ 1452.055842][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:52 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$VT_RESIZEX(r2, 0x541b, 0x0)

06:50:52 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\xacS\xd6y\x90)\x0f\xf8Mx\n\xe7\xf3b\x17\x17\x0f\x03\f!,\xdbx\xe0\xec\xf9ZS\xe7\xe7\xc9\xf8a\xaf?f\x87\t\xf0n\xd4\xa5\xc7\n_0\xeeB\xcf*L\xb2s\x1b\xd0\xca\xa8\f\xbejQ\xc1\xb4\xb9\x99\xc8\xd8\\\x12\xdf\xa4\xd1@\x13\xfd\x8d\x1a\xebjfI_JZ\xa2\xcb\x17\x1aG\xcfL\x82\faG\x1f\x98\xcd\xf6\x90\x1a\xf6\x19\xf0u\x8eT~\xf6\xdc\n\xe1#\'G9\x17\x0fCrD\xa1\xfe\x1c\xc4\xc5oK\n\x81\xdas\xdd\xc2\x13\xf4\x9d\x04\xc4\xb0\xb8', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0)

06:50:52 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
write$cgroup_int(r0, 0x0, 0x0)

06:50:52 executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$eventfd(r0, &(0x7f0000000040), 0x0)

06:50:52 executing program 5:
r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000001740)='./file0\x00', 0x0)
unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

06:50:52 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9aec485ad7976ecb, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0)
write$P9_RSTATu(r0, 0x0, 0x0)

06:50:52 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
lsetxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001580)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

06:50:52 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
statx(r0, &(0x7f00000019c0)='\x00', 0x1000, 0x400, &(0x7f0000002040))

06:50:52 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000280)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x7e08}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x8}, {0x4, 0x3}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:52 executing program 0:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

[ 1452.857982][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:52 executing program 3:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7}, 0x7)
dup2(r1, r0)

06:50:52 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40c042, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

06:50:52 executing program 0:
r0 = eventfd(0x0)
write(r0, &(0x7f0000000000)="abbefe935e3d03ef", 0x8)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r0)
r2 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r2, 0x409, 0x6)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r3+30000000}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:50:53 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
r1 = socket(0x10, 0x802, 0x0)
fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

06:50:53 executing program 4:
r0 = eventfd(0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0x5450, 0x0)

06:50:53 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
getpeername$unix(r0, 0x0, &(0x7f0000000080))

06:50:53 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00')
write$binfmt_script(r0, 0x0, 0x3d)

06:50:53 executing program 5:
prctl$PR_SET_DUMPABLE(0x4, 0x3)

06:50:53 executing program 2:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
utimensat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

06:50:53 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000100)=@file={0x1, './file2\x00'}, 0x6e, 0x0}, 0x0)

06:50:53 executing program 1:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
r2 = dup2(r0, r1)
ioctl$TIOCGPKT(r2, 0x541b, &(0x7f0000000080))

06:50:53 executing program 3:
open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5451, 0x0)

06:50:53 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='maps\x00')
write$eventfd(r0, 0x0, 0x0)

06:50:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)

06:50:53 executing program 4:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x2)

06:50:53 executing program 0:
r0 = eventfd(0x0)
write(r0, &(0x7f0000000000)="abbefe935e3d03ef", 0x8)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r0)
r2 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r2, 0x409, 0x6)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r3+30000000}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:50:53 executing program 2:
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
write$binfmt_aout(r3, 0x0, 0x0)

06:50:53 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r1)
ioctl$VT_RESIZE(r0, 0x5451, 0x0)
clone(0x6e8ed2e19dced150, &(0x7f0000000000)="148829bd134f5f8e517462ea7afbb8db5316e4f1a5142cb801e0b1850cfd2edf27350957682b8e4c0f7e0e5ecc0790e2c0c5551321a9cbbff3cdc47157a99ba147d22765ee342354a2253a7338939d18dffb10a856a7b81ea9b7c53ae1d76bf43c2372a3f27e040912ab9b020615c288f754c86fd6212ecbdaad78e2260de3", 0x0, 0x0, 0x0)

06:50:53 executing program 1:
r0 = epoll_create1(0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0)

06:50:53 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.state\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0)
fcntl$getown(r1, 0x9)

06:50:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/190, &(0x7f00000000c0)=0xbe)
sched_getscheduler(0x0)
r1 = getpid()
getpriority(0x0, r1)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x20400, 0x0)
flock(r2, 0xa)
r3 = dup(0xffffffffffffffff)
ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0))
syz_open_pts(0xffffffffffffffff, 0x4000)

06:50:53 executing program 3:
r0 = epoll_create1(0x0)
epoll_pwait(r0, 0x0, 0x123, 0x0, &(0x7f0000000100), 0x8)

06:50:53 executing program 4:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
flock(r0, 0x2)

06:50:53 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
getsockopt(r0, 0x1, 0x8, &(0x7f0000000040)=""/222, &(0x7f0000000140)=0xde)

06:50:53 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x76e}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x71b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:53 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f00000000c0)={0x0, 0x0}, 0x10)

06:50:53 executing program 5:
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
sync()
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file2\x00')
symlinkat(&(0x7f0000000100)='./file2/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2/file0\x00')

[ 1453.898229][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:54 executing program 0:
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000d937b19f67289e086ed16d8c4f0000"])
mkdir(&(0x7f0000000100)='./file0\x00', 0x20)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000240)=0xc)
setuid(0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000380)="950e713cc09a6ebfdd067cfebd53c241e077a731245c707377a1ec3e0e295bb3e2", 0x21}, {&(0x7f0000000800)="04a18d3c90d098dc538a3d930c7db7094b4f2618b9df3cf587cbb8965f04", 0x1e}, {&(0x7f0000000d40)="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", 0x18f}, {&(0x7f0000000900)="02e995c71efbebf5af0cb3a561fce35dd9050111f4fc4462f5b338503179e8ff31c77103e91d594efdb3724f7ba6dd56f0c45a14a2bdb13e1e325a273e8cbeab7e52dae47d37fd7e6a6c92aee8f8a9847ecd3f669995ff0da0f84bab69135187237f0f85d50374a6fd5f2b1d2f76c90b55bf99b843227ab8f5a83946b6c5a945ac5c47e7e3353715a6", 0x89}, {&(0x7f00000009c0)="58ee2829e5d4c1ed996e1cc8d0ae98947ea39466854e64331da764f142569d8caefa1255d9af8bcfe661477589e677291c5abc92c0aef86224e2eb646c2686f86951b647ef7a72d6b5511886cd6e9e2e2b620cc3e729ac4a95e8901c6a0817be62e87b7120f0e68e56551bd8e851b52a4bbf0a6df1f403bc52fcc37b001cde6dd063cd66196a75244976b0fd4ac5625d3e7a0c35bdc2e4e0e286632a47b16401e37a25ef0d144cb0fb4ef0214d1f715f8df8e6efaf4cafc0e15134e24ad3b8ba5ab3ba82a2d4839776", 0xc9}, {&(0x7f0000000ac0)="79e55ab797ef3f54400e52dec8c99bced104a4b43024daa90897e17e918dc9d5d0b2047a53021430105ab8e0b452ea57da8bb7ab82775f17058a62c4e6a189fa5687a21bfb7d4b989c5c76ad2ca897777bb3d147b3824422a3151ffc0f7131a1854ed45496f94a396d938fc7c56d2d000ce8eb2516ab39f1d40978064d7f29e8ef0c0bb64509b3aabf45052744f86ccebb9870497c91162e896a49242099eb874ca4953aee8e8f6ae3253581fcc1159efaeb7310eff28bdf841afcbe66c0f5744d2e0d6a63e3b62564ccc570c67d", 0xce}], 0x6, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}], 0x48, 0x10}, 0x20000804)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, r1)
write$P9_RWRITE(r0, &(0x7f0000000280)={0xb, 0x77, 0x2, 0x20}, 0xb)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000002c0)={{0x3, 0x0, @reserved="0001c9db294c651861dead853fd5d169297ebd8ab05999a5642f5a1d0af86ce4"}})
r2 = epoll_create1(0x80000)
fcntl$setpipe(r2, 0x407, 0x7)
r3 = semget$private(0x0, 0x2, 0x20)
shmctl$IPC_RMID(r3, 0x0)

06:50:54 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
sync()
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e)
recvfrom$unix(r1, &(0x7f0000000000)=""/26, 0x1a, 0x0, 0x0, 0x0)

06:50:54 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
ioctl$EXT4_IOC_MIGRATE(r0, 0x5450)

06:50:54 executing program 4:
sync()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_read_part_table(0xfffffffffffffc01, 0x1, &(0x7f0000001840)=[{0x0}])
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
r1 = dup(r0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0x5450, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @multicast2}})
setreuid(0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0xc6, 0x6}, {0x401, 0x101}]}, 0x18, 0x3)
ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0)

06:50:54 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
r2 = getpgrp(0x0)
setpgid(r1, r2)

06:50:54 executing program 0:
creat(&(0x7f0000000600)='./file0\x00', 0x0)
r0 = getuid()
r1 = getgid()
chown(&(0x7f0000000000)='./file0\x00', r0, r1)

06:50:54 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:50:54 executing program 4:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0)

06:50:54 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
sync()
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e)
recvfrom$unix(r1, &(0x7f0000000000)=""/26, 0x1a, 0x0, 0x0, 0x0)

06:50:54 executing program 3:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$cgroup_pid(r0, 0x0, 0x0)

06:50:54 executing program 0:
r0 = open(&(0x7f0000000040)='.\x00', 0x143042, 0x0)
write$P9_RMKDIR(r0, 0x0, 0x0)

06:50:54 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x78c5}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:54 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002a80)={'batadv_slave_1\x00'})

06:50:54 executing program 4:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0)

06:50:54 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00')
exit(0x0)
read(r0, 0x0, 0x0)

06:50:54 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

06:50:54 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
epoll_pwait(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1454.703391][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:54 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='em0[\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00')
sendfile(r1, r0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)={{0xcc, 0x0, 0x0, 0x0, 0x206, 0x7ff, 0x2a3}, "ba5b2cc771ebe98d21bd5707a8763f1729b94219f0c82c898f0fa2", [[], []]}, 0x23b)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
getrusage(0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
pwrite64(r2, &(0x7f00000005c0), 0x0, 0x0)
pipe(0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x82000, 0x0)
signalfd(r4, &(0x7f0000000840)={[0x80]}, 0x8)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syncfs(0xffffffffffffffff)
pause()
select(0x0, 0x0, 0x0, &(0x7f00000009c0)={0xfff, 0x0, 0x6}, 0x0)

06:50:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, 0x0, 0x0, 0x4048811, 0x0, 0x0)

06:50:54 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)

06:50:54 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

06:50:54 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
read(r2, 0x0, 0x0)

06:50:54 executing program 2:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x5421, &(0x7f0000000080))

[ 1454.945689][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1455.095284][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:55 executing program 1:
sync()
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00')
r0 = timerfd_create(0x0, 0x0)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)

06:50:55 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
r1 = inotify_init()
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x5452, &(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_config_ext})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xd35cac87, 0x0, 0x46}}], 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x5450, 0x0)
syz_open_pts(r0, 0x1c7c1)

06:50:55 executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$binfmt_script(r0, 0x0, 0xb)
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

06:50:55 executing program 5:
memfd_create(&(0x7f0000000280), 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb, 0x13, r0, 0x62764000)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x5421, 0x200007ef)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000240)=0x3ff)
r2 = socket$unix(0x1, 0x1, 0x0)
getsockname(r2, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0xffffffffffffff66)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x5450)
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r4 = semget$private(0x0, 0x4, 0x100)
shmctl$IPC_RMID(r4, 0x0)

06:50:55 executing program 2:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
r1 = dup(r0)
linkat(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x400)

06:50:55 executing program 4:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14}, 0x0)

06:50:55 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000000))

06:50:55 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
r1 = dup(r0)
mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff)

06:50:55 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)

06:50:55 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00')
write$P9_RLOPEN(r0, 0x0, 0xffffff10)

06:50:55 executing program 1:
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x58}}}, 0x18)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
dup2(r4, r3)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:50:55 executing program 0:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x34)
r1 = socket(0x1, 0x5, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0)
rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00')
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'syz0\x00'})

06:50:55 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
close(r0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fchdir(r0)

06:50:55 executing program 4:
sync()
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00')
truncate(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)

06:50:55 executing program 0:
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7}, 0x7)
close(r0)
eventfd(0x0)
clock_gettime(0x0, &(0x7f0000001bc0)={0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, r1+10000000}}, 0x0)
r2 = getpid()
tkill(r2, 0x1000000000016)

06:50:55 executing program 5:
sync()
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))
r3 = timerfd_create(0x0, 0x0)
fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setuid(r4)
r5 = getegid()
geteuid()
lchown(0x0, 0x0, r5)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, r6, r5, 0x0, 0x0, 0x4, 0x2}, 0x3bc, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffb})
getgroups(0x5, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee00, 0xee00, 0x0, r5])
keyctl$chown(0x4, 0x0, r4, r5)
r7 = fcntl$dupfd(r1, 0x0, r2)
bind(r7, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x14)
getpeername$netlink(r7, 0x0, 0x0)

06:50:55 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x88031, r0, 0x0)

06:50:55 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71b3}, {0x4, 0x1e}, {0x4, 0x2}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
dup2(r1, r0)
fsync(r0)

06:50:56 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
fchown(r0, 0x0, r2)

06:50:56 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0))

06:50:56 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
fcntl$setown(r2, 0x8, 0x0)

[ 1455.979435][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:56 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x5452, &(0x7f0000000080)={'veth1_to_bond\x00'})

06:50:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(r0, &(0x7f0000000600), 0x0, 0x2, 0x0, 0x0)

06:50:56 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$P9_RLERRORu(r2, 0x0, 0x0)

06:50:56 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
statfs(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0)

06:50:56 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$TIOCSTI(r0, 0x5421, 0x0)

06:50:56 executing program 5:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f0000000140), 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
ioctl$TIOCGSERIAL(r1, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040))
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000000c0)=""/49)
inotify_init1(0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
signalfd4(r4, &(0x7f0000000080), 0x8, 0x0)

06:50:56 executing program 3:
open$dir(&(0x7f0000000380)='./file1\x00', 0x140, 0x1)
faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1)

06:50:56 executing program 2:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8903, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00'})

06:50:56 executing program 1:
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0)

06:50:56 executing program 4:
r0 = epoll_create1(0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000))

06:50:56 executing program 1:
sync()
symlink(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:50:57 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, 0x0)

06:50:57 executing program 3:
sync()
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file1\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0/file0/file0\x00', 0x0, 0x0)

06:50:57 executing program 2:
r0 = eventfd(0xdffffffe)
write$P9_RREAD(r0, &(0x7f00000007c0)={0xb}, 0xb)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timerfd_create(0x0, 0x0)
tkill(r1, 0x13)

06:50:57 executing program 4:
r0 = open(&(0x7f00000002c0)='./file0\x00', 0xce042, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

06:50:57 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7d3b}, {0x4, 0x7}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x4, 0x7}, {0x4, 0x6}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1457.015123][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:57 executing program 3:
sync()
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file1\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0/file0/file0\x00', 0x0, 0x0)

06:50:57 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0)
creat(0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x5452, &(0x7f0000000000)=ANY=[])

06:50:57 executing program 1:
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
dup3(r2, r0, 0x0)
write$P9_RFSYNC(r1, 0x0, 0x0)

06:50:57 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40)

06:50:57 executing program 4:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0)
write$P9_RREAD(r0, 0x0, 0x0)

[ 1457.093474][   T28] audit: type=1800 audit(1601275857.098:269): pid=22550 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16258 res=0 errno=0
06:50:57 executing program 2:
setuid(0xee00)
r0 = semget$private(0x0, 0x6, 0x0)
semctl$GETVAL(r0, 0x0, 0xc, 0x0)

[ 1457.125803][   T28] audit: type=1800 audit(1601275857.128:270): pid=22550 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16258 res=0 errno=0
06:50:57 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)

06:50:57 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
r1 = openat(r0, &(0x7f0000000080)='/', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000005c0))
r2 = socket$unix(0x1, 0x5, 0x0)
sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'team_slave_1\x00', {}, 0xffff})
pipe2(&(0x7f0000000100), 0x80000)
eventfd2(0xb, 0x100001)
sendto(0xffffffffffffffff, &(0x7f0000000240)="d3d55cbea914ff07921c34d7571610d97c58724b96309fe596ac1cbfac46718dd1fd9520231002370197534ce506ece6f5fa1b2b7cee44b312b1e1063f49f23ebbd2f1b8808800b240aa994924abcf068f4472043d3b731503e4967da431fb0287216cef2451cdc3f7fc9e8d19a9795ccdf2de203bcffbd2", 0x78, 0x4000001, &(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80)
r3 = semget$private(0x0, 0x3, 0x4e3)
shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x1000)

06:50:57 executing program 1:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create(0x1ff)
splice(r1, 0x0, r0, 0x0, 0x0, 0xc)

06:50:57 executing program 3:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RREADLINK(r0, &(0x7f0000000100)={0x3db, 0x17, 0x0, {0x7, './file0'}}, 0x0)

06:50:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x199)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x5450, 0x0)

[ 1457.236923][   T28] audit: type=1804 audit(1601275857.248:271): pid=22568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=15954 res=1 errno=0
[ 1457.283030][   T28] audit: type=1804 audit(1601275857.248:272): pid=22571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=15954 res=1 errno=0
06:50:57 executing program 0:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r0, 0x0, 0x50d54107c91bf042)

06:50:57 executing program 1:
sync()
openat(0xffffffffffffffff, &(0x7f0000000040)='/', 0x140543, 0x0)

06:50:57 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
dup(r0)

06:50:57 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0)

06:50:57 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x541b, 0x0)

06:50:57 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
getsockname(r0, 0x0, 0x0)

06:50:57 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r0)
getdents(r0, &(0x7f0000000100)=""/234, 0xea)

06:50:57 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4, 0x71af}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:58 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
lseek(r1, 0x0, 0x0)

06:50:58 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
gettid()
syz_open_procfs$namespace(0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:58 executing program 3:
open(&(0x7f0000000080)='./file0\x00', 0xa0340, 0x0)
sync()
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00')
lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0xffffffffffffff38, 0x0)

06:50:58 executing program 0:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'system.posix_acl_access\x00'}, 0x0, 0x0, 0x0)

06:50:58 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
gettid()
syz_open_procfs$namespace(0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:58 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
dup3(r1, r0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
accept(r0, 0x0, 0x0)

06:50:58 executing program 0:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'system.posix_acl_access\x00'}, 0x0, 0x0, 0x0)

06:50:58 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
gettid()
syz_open_procfs$namespace(0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

[ 1458.066670][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1458.135856][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:58 executing program 3:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'system.posix_acl_access\x00'}, 0x0, 0x0, 0x0)

06:50:58 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0)

06:50:58 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
gettid()
syz_open_procfs$namespace(0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:58 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x7191}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x92}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:50:58 executing program 5:
eventfd2(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x02', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x280, 0x0)

06:50:58 executing program 0:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'system.posix_acl_access\x00'}, 0x0, 0x0, 0x0)

06:50:58 executing program 3:
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x3a, &(0x7f0000000100))
r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffa]}, 0x8)
read(r2, 0x0, 0x0)

06:50:58 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
gettid()
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:58 executing program 4:
r0 = socket(0x1, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x38b)

06:50:58 executing program 3:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7}, 0x7)

06:50:58 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind(r0, 0x0, 0x0)

06:50:58 executing program 0:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)=@random={'osx.', 'system.posix_acl_access\x00'}, 0x0, 0x0, 0x0)

06:50:58 executing program 4:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TIOCMBIS(r0, 0x5452, &(0x7f0000000100))

06:50:58 executing program 3:
getrlimit(0xb, &(0x7f0000000140))

[ 1459.095078][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:50:59 executing program 2:
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setxattr(&(0x7f0000000140)='./file2/file1/file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:50:59 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:59 executing program 4:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

06:50:59 executing program 0:
r0 = epoll_create(0x5)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x5452, &(0x7f0000001340)=ANY=[])

06:50:59 executing program 3:
sync()
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RWALK(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
dup3(r2, 0xffffffffffffffff, 0x80000)
sendmmsg$unix(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="fe", 0x1}], 0x1}], 0x1, 0x0)

06:50:59 executing program 5:
r0 = eventfd(0xfffffffc)
r1 = gettid()
r2 = dup2(r0, r0)
write$P9_RWALK(r2, &(0x7f00000011c0)={0x9}, 0x9)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
close(r0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
eventfd(0x0)
tkill(r1, 0x1000000000016)

06:50:59 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

06:50:59 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:59 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00')
write$P9_RSYMLINK(r0, 0x0, 0x41)

06:50:59 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='trustedeth1vboxnet1vboxnet1user\x00', 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

06:50:59 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:59 executing program 3:
r0 = socket(0x1, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0)

06:50:59 executing program 2:
r0 = epoll_create(0x2)
close(r0)
socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000400), 0x4)

[ 1459.764724][   T28] audit: type=1804 audit(1601275859.768:273): pid=22686 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16242 res=1 errno=0
06:50:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000)

06:50:59 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
write$P9_RREADDIR(r1, 0x0, 0x0)

[ 1459.808404][   T28] audit: type=1804 audit(1601275859.818:274): pid=22691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16242 res=1 errno=0
06:50:59 executing program 3:
r0 = eventfd(0x0)
ioctl(r0, 0x10000000005452, &(0x7f0000000580))

06:50:59 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$NS_GET_PARENT(r0, 0x541b, 0x73b000)

06:50:59 executing program 5:
r0 = eventfd(0xfffffffc)
r1 = gettid()
r2 = dup2(r0, r0)
write$P9_RWALK(r2, &(0x7f00000011c0)={0x9}, 0x9)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
close(r0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
eventfd(0x0)
tkill(r1, 0x1000000000016)

06:50:59 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3, r3, 0x0, r3, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x7, 0x2, 0x0, 0x0, 0xfffb})
r4 = getegid()
r5 = geteuid()
lchown(&(0x7f0000000000)='./file0\x00', r5, r4)
r6 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x3, r7, r4, 0x0, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x3, 0x2, 0x0, 0x0, 0xfffb})
getgroups(0x5, &(0x7f00000000c0)=[<r8=>0xffffffffffffffff, 0xee00, 0xee00, 0x0, r4])
getgroups(0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8])
r9 = dup3(r1, r0, 0x0)
r10 = accept4$unix(r9, 0x0, 0x0, 0x0)
recvfrom$unix(r10, 0x0, 0x0, 0x0, 0x0, 0x0)

06:50:59 executing program 1:
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:50:59 executing program 3:
r0 = eventfd(0x0)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = fcntl$dupfd(r0, 0x0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
close(r1)
r2 = eventfd(0x80000006)
write$P9_ROPEN(r1, &(0x7f0000000100)={0x18}, 0x18)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xe220)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:50:59 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

06:50:59 executing program 2:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000002c0)="21d9ede7610a86f13309c3da89cf17fb46be38160eef3d9b32990bc41ce5a28f212414b1c911556bce3d95a6811126af1e1f2889a378dc3e05d3944d1796a8dad85e62115400d5d1d9204df32d7d4f7d367a1b1f512a80ab06ba221d9c215eb4e24fe8e311c0626eac233f68afa92139b508ad6605fd0d1b318b7d43fffc6df1cf572eda29d636ee3f3f0cd33b7b3f22a65f25d10079b13e43a13d734c16e121acf08f45db78e32f81b5cd8f0c52e6d119942528062ebf9bd495001e8ea3e991df5b5fd7e13b0b89e57582419a", 0x6d, 0x400c0, &(0x7f00000000c0)=@abs, 0x0)

06:51:00 executing program 1:
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x408502, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x5451)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fadvise64(r2, 0x0, 0x0, 0x0)
r3 = socket(0x1, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=<r4=>0x0)
prlimit64(r4, 0x3, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000000)=0x80)
fstat(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setuid(r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000000)=0x80)
fstat(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setuid(r10)

06:51:00 executing program 2:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000002c0)="21d9ede7610a86f13309c3da89cf17fb46be38160eef3d9b32990bc41ce5a28f212414b1c911556bce3d95a6811126af1e1f2889a378dc3e05d3944d1796a8dad85e62115400d5d1d9204df32d7d4f7d367a1b1f512a80ab06ba221d9c215eb4e24fe8e311c0626eac233f68afa92139b508ad6605fd0d1b318b7d43fffc6df1cf572eda29d636ee3f3f0cd33b7b3f22a65f25d10079b13e43a13d734c16e121acf08f45db78e32f81b5cd8f0c52e6d119942528062ebf9bd495001e8ea3e991df5b5fd7e13b0b89e57582419a", 0x6d, 0x400c0, &(0x7f00000000c0)=@abs, 0x0)

06:51:00 executing program 4:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x3a90c0, 0x0)
fchown(r0, 0x0, 0x0)

06:51:00 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3, r3, 0x0, r3, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x7, 0x2, 0x0, 0x0, 0xfffb})
r4 = getegid()
r5 = geteuid()
lchown(&(0x7f0000000000)='./file0\x00', r5, r4)
r6 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x3, r7, r4, 0x0, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x3, 0x2, 0x0, 0x0, 0xfffb})
getgroups(0x5, &(0x7f00000000c0)=[<r8=>0xffffffffffffffff, 0xee00, 0xee00, 0x0, r4])
getgroups(0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8])
r9 = dup3(r1, r0, 0x0)
r10 = accept4$unix(r9, 0x0, 0x0, 0x0)
recvfrom$unix(r10, 0x0, 0x0, 0x0, 0x0, 0x0)

06:51:00 executing program 1:
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 5:
r0 = epoll_create(0x1c9e)
fcntl$F_GET_RW_HINT(r0, 0x9, 0x0)

06:51:00 executing program 3:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(0x0, 0x0)
statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/194)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x541b)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0)
dup(0xffffffffffffffff)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00')

06:51:00 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3, r3, 0x0, r3, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x7, 0x2, 0x0, 0x0, 0xfffb})
r4 = getegid()
r5 = geteuid()
lchown(&(0x7f0000000000)='./file0\x00', r5, r4)
r6 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x3, r7, r4, 0x0, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x3, 0x2, 0x0, 0x0, 0xfffb})
getgroups(0x5, &(0x7f00000000c0)=[<r8=>0xffffffffffffffff, 0xee00, 0xee00, 0x0, r4])
getgroups(0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8])
r9 = dup3(r1, r0, 0x0)
r10 = accept4$unix(r9, 0x0, 0x0, 0x0)
recvfrom$unix(r10, 0x0, 0x0, 0x0, 0x0, 0x0)

06:51:00 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x2001, 0x0)
write$P9_RMKDIR(r0, 0x0, 0x0)

06:51:00 executing program 2:
r0 = memfd_create(&(0x7f0000000080)=']!}:/}^%]).\x00', 0x0)
preadv2(r0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x6)

06:51:00 executing program 1:
mkdir(0x0, 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3, r3, 0x0, r3, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x7, 0x2, 0x0, 0x0, 0xfffb})
r4 = getegid()
r5 = geteuid()
lchown(&(0x7f0000000000)='./file0\x00', r5, r4)
r6 = semget$private(0x0, 0x2, 0x8)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000240)={{0x3, r7, r4, 0x0, 0x0, 0x4, 0x2}, 0x3bc, 0x2, 0x3, 0x2, 0x0, 0x0, 0xfffb})
getgroups(0x5, &(0x7f00000000c0)=[<r8=>0xffffffffffffffff, 0xee00, 0xee00, 0x0, r4])
getgroups(0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8])
r9 = dup3(r1, r0, 0x0)
r10 = accept4$unix(r9, 0x0, 0x0, 0x0)
recvfrom$unix(r10, 0x0, 0x0, 0x0, 0x0, 0x0)

06:51:00 executing program 1:
mkdir(0x0, 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

[ 1460.137485][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:00 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000080)="e083f296344a282bcdded35c25c5c6de621de65746384db5b8fdfb1d38c889599c84028af9fced6a11e5fb2c2298d4a4cecfd063743c615e4d2cea00"/74, 0x4a, 0x44055, 0x0, 0x60)

06:51:00 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r1, r0, 0x0)
r3 = accept(r0, 0x0, 0x0)
getsockopt(r3, 0x1, 0x3, &(0x7f0000000000)=""/128, &(0x7f0000000140)=0x80)

06:51:00 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$9p(r2, 0x0, 0x0)

06:51:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f00000002c0))

06:51:00 executing program 5:
prlimit64(0x0, 0x6, &(0x7f00000001c0), &(0x7f0000000200))

06:51:00 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={<r0=>0xffffffffffffffff})
sendto$unix(r0, 0x0, 0x0, 0x7c8c4, 0x0, 0x0)

06:51:00 executing program 1:
mkdir(0x0, 0x12)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x232346, 0x0)
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:51:00 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
write$P9_RLERROR(r0, 0x0, 0x0)

06:51:00 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept$unix(r1, 0x0, 0x0)
fcntl$F_GET_RW_HINT(r2, 0x9, 0x0)

06:51:00 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
syz_open_pts(r1, 0x0)

06:51:00 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 2:
r0 = eventfd(0x0)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff}}, 0x43)
write$P9_RWALK(r1, &(0x7f0000000200)={0x16, 0x6f, 0x0, {0x1, [{}]}}, 0x16)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
close(r1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0)

06:51:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5414, &(0x7f00000001c0))

06:51:00 executing program 0:
r0 = eventfd(0x0)
pipe2$9p(0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
open$dir(&(0x7f0000000200)='./file0\x00', 0x6c4741, 0x0)
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
chown(&(0x7f0000000300)='./file0\x00', 0xee00, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write(0xffffffffffffffff, &(0x7f0000000040)='O', 0x1)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x11, 0x0, {0x0, 0x0, 0x6}}, 0x14)
write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0)
close(r1)
ioctl$sock_TIOCINQ(r0, 0x5450, 0x0)

06:51:00 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$P9_RATTACH(r1, &(0x7f0000000100)={0x14}, 0x14)
dup2(r1, r0)

06:51:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}, 0x0)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r2, &(0x7f0000000740)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}, 0x0)
getsockname(r3, 0x0, &(0x7f00000000c0))

06:51:00 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(0x0, &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x193042, 0x0)
write$P9_RMKNOD(r0, 0x0, 0x0)

06:51:00 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r2)
close(r2)
ioctl$sock_SIOCDELDLCI(r1, 0x5451, 0x0)

06:51:00 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$FICLONE(r1, 0x5451, r0)

06:51:00 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(0x0, &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00')
write$char_raw(r0, 0x0, 0x0)

06:51:00 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(0x0, &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:00 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x41, 0x0)
write$P9_RXATTRWALK(r0, 0x0, 0x0)

06:51:00 executing program 3:
r0 = semget$private(0x0, 0x6, 0x0)
semctl$SEM_INFO(r0, 0x3, 0x10, 0x0)

06:51:00 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404c1, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:51:00 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
r1 = getpgrp(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r1})

[ 1461.176610][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1461.187302][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:01 executing program 5:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000280), 0x0, 0x0, 0x8)
tkill(r0, 0xb)

06:51:01 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:01 executing program 3:
semctl$GETALL(0x0, 0x0, 0x10, &(0x7f0000000340)=""/163)

06:51:01 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)

06:51:01 executing program 0:
mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='9p\x00', 0x0, 0x0)

06:51:01 executing program 2:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETATTR(r0, 0x0, 0x1b9)

06:51:01 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_STAT(r1, 0xd, 0x0)
symlinkat(&(0x7f00000000c0)='./file2/file0\x00', r0, &(0x7f0000000180)='./file0\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
futimesat(r0, &(0x7f0000000200)='./file2/file0\x00', 0x0)

06:51:01 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:01 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00')
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fsetxattr(r1, &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = dup3(r1, r0, 0x0)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:51:01 executing program 0:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x800)
r1 = dup(r0)
read$char_raw(r1, 0x0, 0x5b)

06:51:01 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6a)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
write$P9_RWALK(r0, 0x0, 0x0)

06:51:01 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00')
mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3)

[ 1461.482242][   T28] audit: type=1804 audit(1601275861.488:275): pid=22847 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16332 res=1 errno=0
[ 1461.535911][   T28] audit: type=1804 audit(1601275861.498:276): pid=22851 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16332 res=1 errno=0
06:51:01 executing program 5:
creat(&(0x7f0000000840)='./file0\x00', 0x0)
lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresgid(r0, 0x0, 0x0)

06:51:01 executing program 3:
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

06:51:01 executing program 2:
pipe(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x5451, 0x0)

06:51:01 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0xe)

06:51:01 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

06:51:01 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={<r1=>0xffffffffffffffff})
dup2(r1, r0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)

06:51:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getpeername(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, &(0x7f0000000200)=0x80)
fcntl$notify(r1, 0x0, 0x0)

06:51:01 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(0x0, &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0)

06:51:01 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f0000000080)='macsec0\x00')

06:51:01 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

06:51:01 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(0x0, &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0)

06:51:01 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00')
r1 = memfd_create(&(0x7f0000000100)='userem0\x00', 0x0)
dup2(r1, r0)
write$P9_RSTATFS(r0, 0x0, 0x56)

06:51:01 executing program 5:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
chroot(&(0x7f0000000180)='./file0\x00')

[ 1462.215354][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100)='/dev/ptmx\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f0000000100)=""/240)

06:51:02 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
fdatasync(r0)

06:51:02 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(0x0, &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0)

06:51:02 executing program 0:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x2a0040, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:51:02 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x32)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0)

06:51:02 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = dup(r0)
write$P9_RWSTAT(r1, 0x0, 0x0)

06:51:02 executing program 2:
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x240c0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, r1, 0x0)

06:51:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0)
r1 = epoll_create1(0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8902, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x0, @private}})

06:51:02 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockname(r0, 0x0, 0x0)

06:51:02 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
dup2(r1, r0)
read(r0, 0x0, 0x0)

06:51:02 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

06:51:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
write$P9_RSETATTR(r1, 0x0, 0x0)

06:51:02 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="6f73782e2d5d406d6435736011f3f905402c070ce6f644be6e"], &(0x7f00000000c0)='{,-ppp1-trusted\x00', 0x10, 0x3)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r2, r1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @phonet={0x23, 0xfa, 0xfc, 0xaa}, @l2={0x1f, 0x21bf, @none, 0xfff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x0, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='macsec0\x00', 0x4, 0x6})
lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2)

[ 1462.551341][   T28] audit: type=1800 audit(1601275862.558:277): pid=22907 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16242 res=0 errno=0
06:51:02 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
sched_getparam(r1, &(0x7f0000000080))

06:51:02 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="d2", 0x1, 0x800, 0x0, 0x0)

06:51:02 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

06:51:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffdf9)

06:51:02 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@abs, 0x6e)

06:51:02 executing program 2:
r0 = eventfd(0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc40, 0x0)
fsetxattr(r1, &(0x7f0000000180)=@random={'user.', '\x00'}, 0x0, 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000100)=@random={'user.', '\x00'})

06:51:02 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0xa4bcba01c58e6888)

06:51:02 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

06:51:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000000c0)="f603ebb894c6dcb5039a210b785093e4b25562e03a54438f4d7548da645fabb8b75e379c71556985140a8a52584207c9ed68d8fa7d63c29aa8bf4eff10c521c6ab0fab86f774e39d51627c810fc5130a42830a746d1ddc89891c8b57ddcf86259c948552f93f89f4c64074b7e4b97bdf14055c48ee1eb02d54a3586419f3a4ae1a61e75f600d74ca317bc088d1a66333bb13de20f6e77cc3458302a8946b9964239ea8", 0x12b, 0x20000850, 0x0, 0xfffffffffffffec0)

06:51:02 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7c9e40, 0x0)
mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x200081, 0x0)
sync()
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file1\x00')
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\x00'})

06:51:02 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0x5411, 0x0)

06:51:02 executing program 1:
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000280)='\x00')

06:51:02 executing program 4:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = dup2(r1, r0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8901, &(0x7f0000000080)={0x2, 'gre0\x00'})

06:51:02 executing program 3:
clock_getres(0x385c56960f2b119b, 0x0)

06:51:02 executing program 0:
r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
write$P9_RLERRORu(r0, 0x0, 0x0)

06:51:02 executing program 2:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0)

06:51:02 executing program 5:
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000004880))
recvmmsg(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/57, 0x39}], 0x1}}], 0x1, 0x0, 0x0)

06:51:02 executing program 0:
r0 = eventfd(0x0)
write$P9_RXATTRWALK(r0, 0x0, 0x0)

06:51:02 executing program 2:
mknod$loop(&(0x7f0000000040)='./file1\x00', 0x40, 0x1)

06:51:02 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffe45)

06:51:02 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0)

06:51:02 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x193042, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600100, 0x143)

06:51:03 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000003d40)='./file0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
renameat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

06:51:03 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='A', 0x1}], 0x1}, 0x0)

06:51:03 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1a0080, 0x8)

06:51:03 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x40008010)

06:51:03 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
write$P9_RWRITE(r0, 0x0, 0x0)

06:51:03 executing program 4:
r0 = eventfd(0xfffffffffffffffc)
r1 = dup(r0)
r2 = memfd_create(&(0x7f0000000340)='Jse\x01\x00&\x01\x00boxn\x00', 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000100)={0xa0}, 0xa0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0xfffffe71)

[ 1463.264996][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x73d542, 0x44)

06:51:04 executing program 0:
r0 = eventfd(0x0)
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7}, 0x7)
dup2(r1, r0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
fcntl$setstatus(r0, 0x4, 0x40800)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = gettid()
tkill(r2, 0x1000000000016)

06:51:04 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00')
write$cgroup_freezer_state(r0, 0x0, 0xffffff7b)

06:51:04 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000000)="abd9856d19532fa207ea3929443b4d8361ffd5400214bbfd40d1095f420bafd3bd74193de8fbb852c13d1d0fa13f61e90e39763ecd00000000b8fc37d4efcc1319b0536e717340c8b59c93cec5142a36c78f43d80d07e4faa302cbd7eb0badc8ebcfed34c2b1", 0x2e3, 0x4c0a0, 0x0, 0x73533013eea865b5)

06:51:04 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup2(r0, r0)
ioctl$KDSETLED(r1, 0x5450, 0x0)

06:51:04 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = dup(r0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)

06:51:04 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x541b)

06:51:04 executing program 0:
pipe2$9p(&(0x7f00000013c0), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00')
r1 = memfd_create(&(0x7f0000000180)='K\xde\xeb\xc2}]b\x95m|^\x02\xe0z\x85\xdb\xff\xff\xffP\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\vB\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06#f\x9f\xdc\x1c\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\x01\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde0\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0)
syncfs(r2)

06:51:04 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x5452, &(0x7f0000000240))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x482381, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0)
write$nbd(r1, &(0x7f0000000100)={0x67446698, 0x800004, 0x4, 0x1, 0x1, "21088ff145dbb64b787e1681e2ab83e99183701ab1262e586e64e7b7243af01adc66a9f437732597ba6758f25a353eeeaf7e1ea86e1d421f5ab1165dfcdc5521b05a431ebb67888d8b5c62ee65a6434da05d6d7e482dd12065b01d5e9799928890aadfbdb772ac2cf1b4f9a9256a667d85f7b7b40ffeeb134704693963a4c2ed1b61545a3958100c522f16deeef42081fa46dea3cf723db069ca84b0dd83e732f8f87224f755baef39e20073108ce955d734a96dbdc8a6f140c1e90bf9a5a9ab219b0cd57a4859c31252836672e9aebb834fd45963c0251776258221077a1a8d10131803b1ddf62e7250a4088a90bbc8"}, 0x100)

06:51:04 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0)

06:51:04 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$TIOCSSOFTCAR(r2, 0x5421, 0x0)

06:51:04 executing program 4:
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180))

06:51:04 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
writev(r0, &(0x7f0000000040), 0x0)

06:51:04 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
setreuid(0xee00, 0x0)
r1 = getuid()
setreuid(0xee00, r1)
sendmmsg$unix(r0, &(0x7f000000a540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000009c40)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0)

06:51:04 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000640)='fdinfo\x00')
fsetxattr(r2, &(0x7f0000000680)=@known='user.syz\x00', 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0xfffffffffffffffb)
close(r1)
ioctl$FIDEDUPERANGE(r0, 0x5451, 0x0)

06:51:04 executing program 1:
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x428843, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

06:51:04 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
dup3(r2, r0, 0x0)
write$char_raw(r1, 0x0, 0xb)

06:51:04 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0)
signalfd4(r0, &(0x7f0000000040)={[0xe2da]}, 0x8, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
getuid()
fstat(0xffffffffffffffff, &(0x7f0000000c00))
chown(&(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
pipe2$9p(0x0, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
close(0xffffffffffffffff)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x6d, 0x1}, 0x7)
lsetxattr$security_evm(&(0x7f0000000c80)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000006c0)=ANY=[], 0xa, 0x3)
r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000dc0))
close(0xffffffffffffffff)
syz_read_part_table(0x2, 0x0, 0x0)
ptrace(0x8, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, 0x0)

06:51:04 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x5450)

06:51:04 executing program 1:
getrusage(0x1, &(0x7f0000000000))

06:51:04 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_subtree(r1, 0x0, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x121, 0x0, 0x0)

06:51:04 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7f6e}], 0x1)
semop(r0, &(0x7f00000001c0)=[{0x4, 0x7f}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1464.215296][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:04 executing program 4:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x30142, 0x0)
write$P9_RLCREATE(r0, 0x0, 0x0)

06:51:04 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="2fa30b86560ade30954a085347e87281ed4ae0ebdd914a1049ff6105b97279b6fadb832a266988bceb6ac8fcb39e95dbd07b8be37e37f84d341055626c12ef54aee412f1c018b40aea22f9eba145249c5677248d6d6838280b7bc743faffb9e309518268ee18ce94076cdbb6cce4e83c16bd358ec9817e85f7adfe3a612ee08ebc385cea25acac9475291f41ee8dbd6983843158c2fdeb51e6ea1f67255a194550f48f85c65bb8f729be810be8dfb4deb45fdbf9990666ca85857d7134d938c3125bb288b27374fdc03a9540f4caebe63aded8c71f89a5894d8f794afb2032e5318cf4af08acb507511ce583d4b833fb8ecc06f8e54cade80c8898ea1aab711b86", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
r1 = eventfd(0x0)
writev(r1, &(0x7f00000001c0), 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x0, 'rdma'}, {0x0, 'memory'}]}, 0xe)
dup2(0xffffffffffffffff, r2)
ioctl$KDDELIO(r2, 0x4b35, 0x1ff)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
sync()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)

06:51:04 executing program 1:
clock_gettime(0x2, &(0x7f00000001c0)={0x0, <r0=>0x0})
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x0, r0+30000000}, 0x8)

[ 1464.295760][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.303868][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.312575][  T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.321279][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.330591][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:04 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)
syncfs(r0)
close(r0)
setrlimit(0x7, &(0x7f0000000000)={0x2, 0x40205})
epoll_create(0x7)

06:51:04 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
dup2(r2, r1)

06:51:04 executing program 0:
newfstatat(0xffffffffffffff9c, &(0x7f0000000d40)='\x00', 0x0, 0x1000)

06:51:04 executing program 3:
r0 = inotify_init1(0x0)
ioctl$int_out(r0, 0x800000005452, &(0x7f00000001c0))

06:51:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$sock_SIOCDELRT(r2, 0x5451, 0x0)

06:51:04 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
bind$netlink(r1, &(0x7f00000012c0)={0x10, 0x0, 0x25dfdc01, 0x800020}, 0xc)
fcntl$setstatus(r0, 0x4, 0x40000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
clock_gettime(0x7, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={r2, r3/1000+10000}, 0x10)
symlink(&(0x7f0000000100)='./file0/file1/file0\x00', &(0x7f0000000200)='./file0/file0\x00')
socket(0x10, 0x2, 0x0)
getrandom(&(0x7f0000000240)=""/4128, 0x1020, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
close(r4)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x1)
setuid(0xee01)
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file1\x00')

06:51:04 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
write$P9_RCLUNK(r0, 0x0, 0x61)

06:51:04 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
dup2(r1, r0)

06:51:05 executing program 2:
r0 = socket$unix(0x1, 0x800000000005, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/user\x00')

06:51:05 executing program 1:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0)
pipe2(&(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x0)
dup2(r0, r1)
getdents64(r1, &(0x7f0000000080)=""/126, 0x7e)

06:51:05 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
sendto$unix(r0, &(0x7f0000000000), 0x0, 0x80, 0x0, 0x0)

06:51:05 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCINQ(r0, 0x5452, &(0x7f0000000080))

06:51:05 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$RNDADDENTROPY(r1, 0x5452, &(0x7f0000000340))

06:51:05 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000240)="36246ad598f1b0b0fa40e38eed9dac91cd9a609c93f2295ca4949f45188cfe7f99013f10b8bd69cc8a4fcb08fae27eb324d20f6c8005d27dfed52a718d97b6dfe7f917afee68030b4ab85ff5e0af637edbc31193f719dcffe934e159a4e45625ba0104000000000000459b11f1a9550c5c6a51e1845180481c41764515a8ffb618e66dcf8bada30157d22a4d0dc97beb0d13ba29c32d76e749ab3c695027af1c28a9da9996d6e7dfec2780a4a532a05f9eb595aa8000005454bcfe8440f0e3680b6b58feef4b996f3bb32b33463f8498207608e9a0b96314ef9b3f6c507d5d8513ecaa39f7cf93903b05ab33eecfc2b8305dc41547d85cf32bde0000000000000000", 0x10b, 0x40, 0x0, 0xfffffc93)

06:51:05 executing program 3:
r0 = creat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
creat(0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0)

06:51:05 executing program 0:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000080)='./file0/../file0\x00', 0x0)

06:51:05 executing program 4:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
getdents(r2, &(0x7f0000000180)=""/4096, 0x1000)

06:51:05 executing program 1:
getrandom(0x0, 0x0, 0x3)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, 0x0)
socket(0x10, 0x1, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/user\x00')
signalfd(r1, &(0x7f00000007c0)={[0x200]}, 0x8)

06:51:05 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)

06:51:05 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
fcntl$setstatus(r0, 0x4, 0x0)

06:51:05 executing program 3:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

06:51:05 executing program 1:
r0 = memfd_create(&(0x7f0000000340)='Jse\x01\x00&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
fcntl$setownex(r1, 0xf, 0x0)

06:51:05 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$P9_RLERRORu(r2, 0x0, 0x7be7d4c7140d6ea1)

06:51:05 executing program 0:
io_setup(0xe3, &(0x7f0000000000))
io_destroy(0x0)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20200, 0x101)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcd, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1100, 0x101, 0x7, 0x0, 0x0, 0x7, 0x1})
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCSIG(r1, 0x40045436, 0x19)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x42200, 0x0)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000002c0))
r3 = signalfd(r2, &(0x7f0000000300)={[0xc000000000000]}, 0x8)
fallocate(r3, 0x2, 0x10000, 0x0)
r4 = accept$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
dup3(r4, r2, 0x0)
r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x80000)
fcntl$addseals(r5, 0x409, 0x4)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)

[ 1465.334550][   T28] audit: type=1804 audit(1601275865.338:278): pid=23112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16251 res=1 errno=0
[ 1465.362865][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:05 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
dup3(r0, r1, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x10, &(0x7f0000000240), &(0x7f0000000040)=0x8)

06:51:05 executing program 3:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:05 executing program 2:
open$dir(&(0x7f0000000080)='./file0\x00', 0x2c641, 0x100)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file2\x00')
execve(&(0x7f00000000c0)='./file2\x00', 0x0, 0x0)

06:51:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
sync()
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

06:51:05 executing program 1:
r0 = eventfd(0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000004000))

[ 1465.398844][   T28] audit: type=1804 audit(1601275865.348:279): pid=23112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16251 res=1 errno=0
06:51:05 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
read$char_raw(r0, 0x0, 0x0)

06:51:05 executing program 1:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)

06:51:05 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000007880), 0x8, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RSTATFS(r0, 0x0, 0x0)

06:51:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
sync()
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$sock(r1, &(0x7f0000001280)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fa7248f0e29ee0f37beb008abc3011280ffd1f93a0666eeac1fc433a907d55479e8c79633d117d26233de902dc90d2d938ea33c87984901281de8c7ca54d07"}, 0x80, 0x0}, 0x0)

06:51:05 executing program 3:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000001040)="edf6d8a391b9b1dd2a487c3a9f21a0986f6e4562976081084e461b88e3ffc2b242eb49bf06000000000000007988099062aab5e790d726b16ca898fefdd12256a3963551804adb31ac4a8d1d9a0c865cf0898e3addc33a746566b9add810a178f9c12196747fed4d78318c8b02c80245c40f50d120695e0c0adb227f188ee645232f921adf851b319bc326d663a472475c31e06dd2534ed3dcd936b255b07a19ba2a7713fa72c7ee6382729921c65d47eda471779199973f15c0b3bb57f75c8a8fc0bfc2be751bdb", 0xc8}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
nanosleep(&(0x7f00000000c0), 0x0)

06:51:05 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x40, &(0x7f0000000100)=@abs, 0x73a000)

06:51:05 executing program 1:
r0 = eventfd(0x80000002)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xe220)
r1 = eventfd(0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

06:51:05 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x0)

06:51:05 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x848c0, 0x0)
fcntl$getflags(r0, 0x0)

06:51:05 executing program 3:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:05 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00')
ioctl$FIOCLEX(r0, 0x5451)

06:51:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x5411, &(0x7f0000000100))

06:51:05 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
write$P9_RRENAMEAT(r0, 0x0, 0x0)

06:51:05 executing program 1:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
read$eventfd(r0, 0x0, 0x0)

06:51:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x1c1}, 0xffffff7e)
write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)
dup2(r1, r0)

06:51:05 executing program 4:
r0 = gettid()
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x1)

06:51:05 executing program 2:
r0 = inotify_init1(0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000015c0))

06:51:05 executing program 1:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0)
statx(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = geteuid()
setresuid(r1, 0x0, r2)

06:51:05 executing program 0:
open$dir(&(0x7f0000000200)='./file0\x00', 0x20040, 0x8)

06:51:05 executing program 4:
sync()
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = eventfd2(0xfffff0ee, 0x800)
r2 = dup(r1)
write$char_usb(r2, &(0x7f0000001640)="4893a4247b82278d", 0x8)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000480)={0xfff, 0x1, 0x0, 0x3, 0x6, 0xcf})
r3 = eventfd2(0xfffff0ee, 0x800)
r4 = dup2(r0, r3)
eventfd2(0xfffff0ee, 0x800)
r5 = dup(0xffffffffffffffff)
write$char_usb(r5, 0x0, 0x0)
bind$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
write$P9_RREADDIR(r4, &(0x7f0000000200)={0xf3, 0x29, 0x2, {0x5, [{{0x0, 0x1, 0x4}, 0x3, 0x1, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x80, 0x4, 0x8}, 0x829, 0x80, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x2, 0x4, 0x5}, 0x1, 0x6, 0x7, './file2'}, {{0xbed4f96f21cb77ff, 0x1, 0x7}, 0x5ea4ddfe, 0x6, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x8, 0x2, 0x6}, 0x0, 0x1, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x2, 0x3, 0x4}, 0x5, 0x0, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x0, 0x0, 0x1}, 0x0, 0x7, 0x7, './file2'}]}}, 0xf3)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="fe", 0x1}], 0x1}], 0x1, 0x0)

06:51:05 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xaf1e68c814e82235, r0, 0x0)

06:51:05 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
getsockname(r0, &(0x7f0000005b80)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000005c00)=0x80)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000005b00))

06:51:05 executing program 0:
open(&(0x7f0000000000)='./file0\x00', 0x2821e2, 0xbe72bf9143333b03)

06:51:05 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18}, 0xffffff37)

06:51:05 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x6d1, 0x0)
ioctl$TCGETX(r0, 0x5432, 0x0)

06:51:05 executing program 4:
sync()
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = eventfd2(0xfffff0ee, 0x800)
r2 = dup(r1)
write$char_usb(r2, &(0x7f0000001640)="4893a4247b82278d", 0x8)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000480)={0xfff, 0x1, 0x0, 0x3, 0x6, 0xcf})
r3 = eventfd2(0xfffff0ee, 0x800)
r4 = dup2(r0, r3)
eventfd2(0xfffff0ee, 0x800)
r5 = dup(0xffffffffffffffff)
write$char_usb(r5, 0x0, 0x0)
bind$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
write$P9_RREADDIR(r4, &(0x7f0000000200)={0xf3, 0x29, 0x2, {0x5, [{{0x0, 0x1, 0x4}, 0x3, 0x1, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x80, 0x4, 0x8}, 0x829, 0x80, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x2, 0x4, 0x5}, 0x1, 0x6, 0x7, './file2'}, {{0xbed4f96f21cb77ff, 0x1, 0x7}, 0x5ea4ddfe, 0x6, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x8, 0x2, 0x6}, 0x0, 0x1, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x2, 0x3, 0x4}, 0x5, 0x0, 0xa, '\xe9\x1fq\x89Y\x1e\x923aK'}, {{0x0, 0x0, 0x1}, 0x0, 0x7, 0x7, './file2'}]}}, 0xf3)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="fe", 0x1}], 0x1}], 0x1, 0x0)

[ 1465.853286][   T28] audit: type=1800 audit(1601275865.858:280): pid=23183 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16234 res=0 errno=0
06:51:05 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x443f9, 0x0)
write$P9_RLERROR(r0, 0x0, 0x0)

06:51:05 executing program 0:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0)
write$P9_RCREATE(r0, 0x0, 0x0)

06:51:05 executing program 1:
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/file1\x00')

06:51:06 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x5421, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x0, @empty}})

06:51:06 executing program 4:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00')
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:51:06 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffdaa}, 0x0)

06:51:06 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000380)='q', 0x1, 0x4040854, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80)

06:51:06 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, 0x0, 0x0, 0x40000, 0x0, 0x0)

06:51:06 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCDELDLCI(r0, 0x5451, 0x0)

06:51:06 executing program 4:
r0 = socket$unix(0x1, 0x800000000005, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

06:51:06 executing program 1:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
write$cgroup_type(r0, 0x0, 0x0)

06:51:06 executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
signalfd(r1, &(0x7f0000000000), 0x8)

06:51:06 executing program 0:
symlink(&(0x7f0000002d00)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

06:51:06 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCDELDLCI(r0, 0x5451, 0x0)

06:51:06 executing program 1:
fchown(0xffffffffffffffff, 0x0, 0xee00)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
rt_sigtimedwait(&(0x7f00000002c0), 0x0, 0x0, 0x8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_TSC(0x1a, 0x0)

06:51:06 executing program 3:
r0 = eventfd(0x0)
ioctl$SIOCGSTAMP(r0, 0x8901, &(0x7f0000000040))

06:51:06 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71ac}, {0x4, 0x1c5}, {0x4, 0x401}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:06 executing program 3:
sync()
r0 = socket$unix(0x1, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xd)
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
setxattr$trusted_overlay_nlink(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:51:06 executing program 2:
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000008, 0x12132, 0xffffffffffffffff, 0x0)

06:51:06 executing program 5:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xca843, 0x0)

06:51:06 executing program 2:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x6d1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8901, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0xffff, 0x5, 0x6, 0x200, 0x13, "897e4ad1341197f8a9ff69d649d4fff5d65fef"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00')
syncfs(r1)
sysinfo(&(0x7f0000000100)=""/178)
lsetxattr$security_capability(&(0x7f0000000040)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0)
openat(r1, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x6d1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8901, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0})
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000))
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)

[ 1466.384962][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:06 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180), 0xffffffffffffff4e)

06:51:06 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20020007)
writev(r1, 0x0, 0x0)

06:51:06 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
unlink(0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

06:51:06 executing program 5:
r0 = socket$unix(0x1, 0x20000000001, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RLCREATE(r1, 0x0, 0x0)

06:51:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
fstat(r2, &(0x7f0000000000))

06:51:07 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
setreuid(0x0, r1)

06:51:07 executing program 3:
r0 = timerfd_create(0x0, 0x0)
close(r0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)

06:51:07 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x200000000000002, 0x0)
dup3(r1, r0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x541b, 0x0)

06:51:07 executing program 4:
sync()
r0 = gettid()
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
tkill(r0, 0x7)

06:51:07 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
write$P9_RLOPEN(r0, 0x0, 0x0)

06:51:07 executing program 0:
fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x104)
request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa2\x00', 0xfffffffffffffffd)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000500)={0x11f, 0x14, &(0x7f0000000100)="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"})
r0 = socket$netlink(0x10, 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000540)={{0x3, 0x0, @identifier="1200ac4bee7a839ec79e626341dc995b"}})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=<r1=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000600)=r1)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = creat(&(0x7f0000000640)='./file0\x00', 0x104)
r4 = signalfd4(r0, &(0x7f0000000680)={[0x4]}, 0x8, 0x800)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000006c0)={0x59, 0x81, 0x8, 0x0, 0x0, [{{r0}, 0x5}, {{r2}, 0x9}, {{r0}, 0x40}, {{r3}, 0x6}, {{r0}, 0x100000001}, {{r0}, 0x7}, {{}, 0xfffffffffffffff7}, {{r4}, 0x6}]})
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000800))
clock_gettime(0x0, &(0x7f0000001400)={<r5=>0x0, <r6=>0x0})
recvmmsg(r3, &(0x7f0000001380)=[{{&(0x7f0000000840)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/47, 0x2f}], 0x3, &(0x7f0000000a00)=""/238, 0xee}, 0x61}, {{&(0x7f0000000b00)=@isdn, 0x80, &(0x7f0000001280)=[{&(0x7f0000000b80)=""/183, 0xb7}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/247, 0xf7}, {&(0x7f0000000ec0)=""/48, 0x30}, {&(0x7f0000000f00)=""/244, 0xf4}, {&(0x7f0000001000)=""/116, 0x74}, {&(0x7f0000001080)=""/179, 0xb3}, {&(0x7f0000001140)=""/255, 0xff}, {&(0x7f0000001240)=""/38, 0x26}], 0xa, &(0x7f0000001340)=""/27, 0x1b}, 0x1}], 0x2, 0x1, &(0x7f0000001440)={r5, r6+10000000})
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001480)='/dev/urandom\x00', 0x646002, 0x0)
ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f00000014c0)=0x7)
ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001500))
fremovexattr(r4, &(0x7f0000001540)=@random={'btrfs.', ']\x00'})
write$P9_RWRITE(r7, &(0x7f0000001580)={0xb, 0x77, 0x1, 0x8}, 0xb)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000001600))

06:51:07 executing program 2:
sync()
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
rename(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00')
r0 = timerfd_create(0x0, 0x0)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
lsetxattr$security_evm(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0)

06:51:07 executing program 4:
setresgid(0xee01, 0xffffffffffffffff, 0x0)

06:51:07 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
getpeername$unix(r0, 0x0, 0x0)

06:51:07 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
dup2(r1, r0)
fdatasync(r0)

06:51:07 executing program 4:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8b35bfaad6421a41, 0x0)
ftruncate(r0, 0x0)

06:51:07 executing program 0:
fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x104)
request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa2\x00', 0xfffffffffffffffd)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000500)={0x11f, 0x14, &(0x7f0000000100)="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"})
r0 = socket$netlink(0x10, 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000540)={{0x3, 0x0, @identifier="1200ac4bee7a839ec79e626341dc995b"}})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=<r1=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000600)=r1)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = creat(&(0x7f0000000640)='./file0\x00', 0x104)
r4 = signalfd4(r0, &(0x7f0000000680)={[0x4]}, 0x8, 0x800)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000006c0)={0x59, 0x81, 0x8, 0x0, 0x0, [{{r0}, 0x5}, {{r2}, 0x9}, {{r0}, 0x40}, {{r3}, 0x6}, {{r0}, 0x100000001}, {{r0}, 0x7}, {{}, 0xfffffffffffffff7}, {{r4}, 0x6}]})
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000800))
clock_gettime(0x0, &(0x7f0000001400)={<r5=>0x0, <r6=>0x0})
recvmmsg(r3, &(0x7f0000001380)=[{{&(0x7f0000000840)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/47, 0x2f}], 0x3, &(0x7f0000000a00)=""/238, 0xee}, 0x61}, {{&(0x7f0000000b00)=@isdn, 0x80, &(0x7f0000001280)=[{&(0x7f0000000b80)=""/183, 0xb7}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/247, 0xf7}, {&(0x7f0000000ec0)=""/48, 0x30}, {&(0x7f0000000f00)=""/244, 0xf4}, {&(0x7f0000001000)=""/116, 0x74}, {&(0x7f0000001080)=""/179, 0xb3}, {&(0x7f0000001140)=""/255, 0xff}, {&(0x7f0000001240)=""/38, 0x26}], 0xa, &(0x7f0000001340)=""/27, 0x1b}, 0x1}], 0x2, 0x1, &(0x7f0000001440)={r5, r6+10000000})
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001480)='/dev/urandom\x00', 0x646002, 0x0)
ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f00000014c0)=0x7)
ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001500))
fremovexattr(r4, &(0x7f0000001540)=@random={'btrfs.', ']\x00'})
write$P9_RWRITE(r7, &(0x7f0000001580)={0xb, 0x77, 0x1, 0x8}, 0xb)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000001600))

06:51:07 executing program 1:
get_mempolicy(&(0x7f0000000040), 0x0, 0x1, &(0x7f0000ffd000/0x2000)=nil, 0x4)

06:51:07 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r1, r0, 0x0)
r2 = accept$unix(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x5411, &(0x7f0000000000)={0x2, 'ipvlan1\x00'})

06:51:07 executing program 0:
sync()
mknod$loop(&(0x7f0000000140)='./file1\x00', 0x0, 0x1)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)='./file1\x00')
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xfffffffffffffe5d, 0x0, 0x0, "8f66a97700439acaab85e500", "d74120ff5c2a814a398ba37675f93b0d619ee055077bb8b9a6f3a597cf2eae42959a4d49a4d735f000ade1b5b76dfe2da1692b145d04fbb4f388e43a0b0c671641c15a483d0752eb9f67b686fbd2be31684b7553c7b23bfa35b704ef80302fa44da77c8ce60b2c8b591f4dbaef1fc571ecfa6105e1fd651ddaf6c0"}, 0xffffffffffffff31, 0x0)

06:51:07 executing program 4:
sync()
symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00')
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file2\x00')
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0)

[ 1467.255027][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:07 executing program 5:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x5450, 0x0)

06:51:07 executing program 2:
open$dir(&(0x7f0000000080)='./file0\x00', 0x24a, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff)

06:51:07 executing program 1:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$P9_RREMOVE(r0, 0x0, 0x0)

06:51:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
utimensat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

06:51:07 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x46)
linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x0)

06:51:07 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x5450, 0x0)

06:51:07 executing program 3:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
tkill(r1, 0x13)

06:51:07 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
dup3(r0, r1, 0x0)
getsockname(r1, 0x0, &(0x7f0000003a40))

06:51:07 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = dup(r0)
ioctl$TIOCMSET(r1, 0x5450, 0x0)

06:51:07 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\xb9\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$?\xad\x8d\x13A,ek\x8c\xa0\x9a\xd6 C\xc2G\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\x01\x80\x00\x00\x00\x00\x00\x00\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
syncfs(r1)
mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

06:51:07 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0)

[ 1467.415305][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:07 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
recvmmsg(r2, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000121, 0x0)

06:51:07 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, 0x0)

06:51:07 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
write$P9_RXATTRWALK(r1, 0x0, 0x0)

06:51:07 executing program 1:
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGISO7816(r0, 0x80285442, 0x0)

06:51:07 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
fdatasync(r1)

06:51:07 executing program 0:
r0 = eventfd(0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000640)={0x1f, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, '^'}}, 0x1f)

06:51:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
write$P9_RREADLINK(r0, 0x0, 0xfffffdcf)

06:51:07 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

06:51:07 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000380)='./file0/file0\x00', r1, &(0x7f0000000340)='./file0/file1\x00')

06:51:07 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0)
flock(r1, 0x1)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)

06:51:07 executing program 0:
prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffe000/0x1000)=nil)

06:51:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)
r2 = epoll_create1(0x0)
syncfs(r2)
close(r1)
r3 = dup2(r0, r0)
ioctl$SIOCGSTAMP(r3, 0x5450, 0x0)

06:51:07 executing program 5:
r0 = gettid()
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7}, 0x7)
close(r1)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x13)

06:51:07 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f0000000280)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
syncfs(r0)
lstat(&(0x7f0000000240)='./file0/file0\x00', 0x0)

06:51:07 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
write$P9_RXATTRWALK(r1, 0x0, 0x0)

06:51:07 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000380)='./file0/file0\x00', r1, &(0x7f0000000340)='./file0/file1\x00')

06:51:07 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
fchown(r0, 0x0, 0x0)

06:51:07 executing program 1:
prlimit64(0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0))

06:51:07 executing program 5:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ioctl$sock_TIOCINQ(r0, 0x5450, 0x0)

06:51:07 executing program 2:
pipe2(&(0x7f0000000540)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

06:51:07 executing program 0:
r0 = socket$unix(0x1, 0x1000000000000002, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x5450, r2)

[ 1468.455046][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:09 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x0, @broadcast}})

06:51:09 executing program 1:
open(&(0x7f0000000200)='./file2\x00', 0x4519840, 0xa5)
rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000000)='./file0\x00')
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x0, "4382fa6b2ddf72e3108f98dc3f"}, 0xf, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x196, 0x0, 0x2de, 0x0, 0x0})

06:51:09 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000040)="cc19101c48fb650cbaf2c9e5ee7d91026e2415e159d4d0ad1dcd1c1e48e32ee6fc02871f83cd763694cf43088aea126101a34270e4958397b3d98cc53a4c241af2e19f8959cfc8d2b75ca236d01a20f3c90313b3787bb83055f9328214792a5a3e775f4598067dc2284097642c8ec457353c6bbfacde0bf102dfc56ba3bfbfc4255980bd2bafd92b1f31ee3ace15586bd98bd1cdb76b1b161138c4e9923f2b6846897296ef2364efca685c30faf95da8c79e582f5abd51fad8977e656e4066b9de4aadb5f310352534951b2384370a9b1d3b0ebee6bf806d163d618eff1622589c5b", 0x57e14d2dec7c0eb6, 0x40, 0x0, 0x0)
sendto(r0, &(0x7f0000000040)="cc", 0x1, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

06:51:09 executing program 5:
pipe2$9p(&(0x7f0000000040), 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r1, 0x409, 0x6)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x39, 0x37, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b, 'eth0}vmnet0cpuset-eth1wlan0'}}, 0x39)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @local}})
ioctl$sock_SIOCBRADDBR(r0, 0x541b, &(0x7f0000000280)='ip6gre0\x00')
r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
semctl$GETPID(r3, 0x0, 0xb, 0x0)

06:51:09 executing program 0:
r0 = gettid()
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
r4 = dup(r1)
ioctl$TIOCGPTLCK(r4, 0x541b, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5452, &(0x7f0000000100))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5452, 0x0)
unlinkat(r5, 0x0, 0x0)
tkill(r0, 0x1000000000016)

06:51:09 executing program 4:
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)

06:51:09 executing program 3:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$P9_RLERRORu(r2, 0x0, 0xfffffffffffffd58)

[ 1469.425204][  T801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1469.433798][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1469.443418][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:09 executing program 4:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)='u\x90 ', 0x3, 0x2)
eventfd2(0x9, 0x801)
getdents(r0, &(0x7f0000000280)=""/245, 0xf5)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5451, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5451, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TCSETXF(r3, 0x5451, 0x0)

06:51:09 executing program 1:
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040))
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1ba)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000100)={{0x3, 0x0, @reserved="4be51cf1eb4b3e8deb6d7276db3be2fea6c5756974d3c75fed696a0a81f70b26"}})
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x80000000})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x0, 0x3, 0x1, 0x3, 0x10}})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20400, 0x0)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000280))
ioctl(r4, 0x5, &(0x7f00000002c0))
truncate(&(0x7f0000000300)='./file0\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x80, 0x1f, 0x1, 0x4, 0x3e, 0x4, 0xd5, 0x38, 0xf0, 0xe7, 0x1ff, 0x20, 0x2, 0x1, 0x1, 0x401}, [{0x2, 0x0, 0x80000000, 0x80000000, 0x3, 0x0, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0x9, 0x8, 0xb7, 0x3}], "cc78324d33b3fa1cd8af4417ac05c13cf051ccea36586655103c11d9debf2726263cf1af515f270a2995a49bff42bfd8cb80e702c0a5e84d6c12a7d1d126efdea8372b052b4912fe6e8862e5bf24fbb4c2f8b2c7eeae9a7db5295f5853bfca64ccd859d0d6ee67dc4945f1e47de7b31e71c9"}, 0xea)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
inotify_add_watch(r3, &(0x7f0000000440)='./file0\x00', 0x1000000)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000480))

[ 1469.496692][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:09 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000040)="cc19101c48fb650cbaf2c9e5ee7d91026e2415e159d4d0ad1dcd1c1e48e32ee6fc02871f83cd763694cf43088aea126101a34270e4958397b3d98cc53a4c241af2e19f8959cfc8d2b75ca236d01a20f3c90313b3787bb83055f9328214792a5a3e775f4598067dc2284097642c8ec457353c6bbfacde0bf102dfc56ba3bfbfc4255980bd2bafd92b1f31ee3ace15586bd98bd1cdb76b1b161138c4e9923f2b6846897296ef2364efca685c30faf95da8c79e582f5abd51fad8977e656e4066b9de4aadb5f310352534951b2384370a9b1d3b0ebee6bf806d163d618eff1622589c5b", 0x57e14d2dec7c0eb6, 0x40, 0x0, 0x0)
sendto(r0, &(0x7f0000000040)="cc", 0x1, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

06:51:09 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
syncfs(r0)
close(r0)
socketpair(0x1, 0x5, 0x0, 0x0)

06:51:09 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r1 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
dup2(r1, r0)

06:51:09 executing program 1:
r0 = eventfd(0xdffffffe)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = dup2(r0, r0)
write$P9_RLERRORu(r2, &(0x7f0000000000)={0x14, 0x7, 0x0, {{0x7, 'mounts\x00'}}}, 0x14)
close(r0)
socket$unix(0x1, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:51:09 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
futimesat(r2, 0x0, &(0x7f0000000040)={{0x77359400}})

06:51:09 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.state\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0)
write$P9_RREADLINK(r1, 0x0, 0x0)

06:51:09 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
readv(r1, 0x0, 0x0)

[ 1470.294910][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.535878][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.574895][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:12 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RGETLOCK(r0, 0x0, 0x0)

06:51:12 executing program 4:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x1ff)
r1 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x50, r1, 0x70b50000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='veth1_macvtap\x00')
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0/file0\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x3)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0/file0\x00'}, 0x6e)
r2 = dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000600)={0x4, 0xf, 0x2})
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x1, 'vlan0\x00', {}, 0x3})
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000480)={0xd0, 0x1, &(0x7f0000000080)})
fallocate(r1, 0x0, 0x3, 0xffff)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000004c0)={0x4, 0x100, 0xfffffe00, 0x4445, 0x1, "4b974fe876bff350c44feaadd1b1550905c3a2"})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x20c0, 0x0)
bind$unix(r3, &(0x7f0000000540)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = semget$private(0x0, 0x3, 0x40)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000780)={'veth0_to_batadv\x00'})
shmctl$SHM_LOCK(r4, 0xb)
name_to_handle_at(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000680)=ANY=[], &(0x7f00000005c0), 0x71081b8c66cfeb85)

06:51:12 executing program 3:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
unlink(&(0x7f0000000000)='./file0/file0\x00')

06:51:12 executing program 1:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x37e, 0x0)
socket(0x0, 0x0, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)

06:51:12 executing program 2:
symlink(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)='./file0\x00')
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:12 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

06:51:12 executing program 4:
r0 = eventfd2(0x0, 0x0)
r1 = socket$unix(0x1, 0x200000000005, 0x0)
r2 = dup2(r0, r1)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x5450, 0x0)

06:51:12 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
fchown(r1, 0xee01, 0x0)

06:51:12 executing program 0:
epoll_create1(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0)

06:51:12 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCSETA(r1, 0x541b, &(0x7f0000000040))

06:51:12 executing program 1:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)

06:51:12 executing program 4:
r0 = eventfd(0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @remote}})

06:51:12 executing program 2:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

06:51:12 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
close(r0)
eventfd2(0xfffffffe, 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14}, 0x14)

06:51:12 executing program 1:
r0 = syz_open_dev$char_raw(&(0x7f0000002240)='/dev/raw/raw#\x00', 0x0, 0xa00)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa14105ea353fc7c7, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2)
ioctl$FIOCLEX(r1, 0x5451)
r2 = dup3(r0, r0, 0x0)
connect(r2, &(0x7f0000002280)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(morus640-generic)\x00'}, 0x80)
pwrite64(r1, 0x0, 0x8, 0x5)
r3 = semget(0x2, 0x2, 0x301)
semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f00000010c0)=""/4096)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)=<r4=>0x0)
r5 = semget$private(0x0, 0x2, 0x33)
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/null\x00', 0x18d40, 0x0)
shmat(r5, &(0x7f0000fff000/0x1000)=nil, 0x1000)
semctl$GETZCNT(r5, 0x0, 0xf, &(0x7f00000020c0)=""/226)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000000c0)={{r1}, r4, 0x0, @unused=[0x4, 0x9, 0x4, 0x2007ff], @devid})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000002200))

06:51:12 executing program 3:
r0 = eventfd(0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000100))

06:51:12 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
memfd_create(0x0, 0x0)
write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0)

[ 1472.616707][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:12 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
dup2(r1, r0)
getsockname(r0, 0x0, &(0x7f00000000c0))

06:51:12 executing program 0:
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, 0x0, 0x0)

06:51:12 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0)
renameat(r0, &(0x7f0000000c80)='.\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file1\x00')

06:51:12 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14}, 0x14)
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
open(&(0x7f0000000000)='.\x00', 0x84a842, 0x0)
tkill(r0, 0x1000000000016)

06:51:12 executing program 4:
sync()
symlink(&(0x7f0000000080)='./file2\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040))
write$P9_RSTATu(r0, &(0x7f0000000340)={0xa0, 0x7d, 0x0, {{0x0, 0x78, 0x0, 0xfffffffb, {0x88, 0x3, 0x8}, 0x0, 0x1f, 0x1, 0x0, 0xc, '*vboxnet0!-*', 0x13, 'nodevwlan1security[', 0x13, 'cgroup.controllers\x00', 0x13, 'cgroup.controllers\x00'}, 0x13, 'cgroup.controllers\x00'}}, 0xa0)

06:51:12 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

06:51:12 executing program 2:
r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f\xa7\xa2p19b\xa0\x9d\xa1\b\xbf\xd7\xc0\x15~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12\x95\xfa\xfa\xd9\xda \xd7C\aB\x93%/\rw\xb7\xe6\xb0\x1d\xd8\xd5\x03\t\xf7<}\x99-\x1e\xd0\xe3\x7f\xf1\x87QT\x13\x84\x1a\xde\x01w\xfc\xdfh\x93\x92T\xc6R\an\xe1\x06K\x17\x8fb\xa7\xe3\x05\xe3\x15,\x8b\xbe\xc7\xa5\a\xe7\x83\x91@d\xa4\xd4[\xb6z\xd9Lpf\xdf\x95(\x99\n\xad{U%\xb4\xd5\xa3t\x19\xff\xacDA\xf6E0\xab\xffK\xab\xe2\x046\xcd&[\xe9X\x1a8R\xa5\xb6\x81\xd6Xd\x94?\xd9\x1b\xe4@@\x18\xdfG\xaa\f\xc1\f\xb7|\a\x89|\x12\xc9\xa7?\xeb\x90\xbb 1\xd0D7)\x84L\x98\x94\xba7\x81\xf9\xfd#\x8c&o\x03\x8b]6s\xafu\x91\x85t\x1a\xec\x98\'\x935\xe7\xf9\xff', 0x0)
pwrite64(r0, &(0x7f0000000800)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
syncfs(r0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:12 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)

06:51:12 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='#em\x06\x00\x00\x00', 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0x5451, 0x0)

06:51:12 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x270040, 0xb6)

06:51:12 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
write$char_raw(r1, 0x0, 0xe800)
setrlimit(0x1, &(0x7f0000000080))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
creat(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
creat(0x0, 0x0)
clock_gettime(0x0, 0x0)

06:51:12 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KS\x11\x00Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xe80\xb7\x1b|\x10\xef3\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92\xd3\x0f\x16L\xf8\xd0\xf10\xc6\xb9u\xe0\xb4\x146\xff\x8e\x9a1\xb6\xc5\xf1\"\xf6\x896_\xdf\xcf\xa1', 0x0)
write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffc69, 0x8)
sendfile(r1, r1, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x100000f, 0x12, r1, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
tkill(r0, 0x13)

06:51:12 executing program 5:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = dup2(r1, r0)
statx(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0))

06:51:12 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71ad}, {0x4, 0x1c5}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:12 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
mmap$perf(&(0x7f000014e000/0x4000)=nil, 0x4000, 0x0, 0xc0031, r0, 0x0)

06:51:12 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
write$P9_RWALK(r0, 0x0, 0x0)

06:51:12 executing program 2:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="2fa30b86560ade30954a085347e87281ed4ae0ebdd914a1049ff6105b97279b6fadb832a266988bceb6ac8fcb39e95dbd07b8be37e37f84d341055626c12ef54aee412f1c018b40aea22f9eba145249c5677248d6d6838280b7bc743faffb9e309518268ee18ce94076cdbb6cce4e83c16bd358ec9817e85f7adfe3a612ee08ebc385cea25acac9475291f41ee8dbd6983843158c2fdeb51e6ea1f67255a194550f48f85c65bb8f729be810be8dfb4deb45fdbf9990666ca85857d7134d938c3125bb288b27374fdc03a9540f4caebe63aded8c71f89a5894d8f794afb2032e5318cf4af08acb507511ce583d4b833fb8ecc06f8e54cade80c8898ea1aab711b86", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')
syncfs(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
fchownat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

06:51:13 executing program 0:
sync()
setreuid(0xee00, 0x0)
getresuid(&(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000180), &(0x7f0000000100))
setuid(r0)
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x0, 0x0)

06:51:13 executing program 2:
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8903, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1472.990988][   T28] audit: type=1804 audit(1601275872.998:281): pid=23535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16210 res=1 errno=0
06:51:13 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
write$P9_RLINK(r0, 0x0, 0x0)

06:51:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, 0x0)

06:51:13 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0)
preadv2(r0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2)

[ 1473.046865][   T28] audit: type=1804 audit(1601275873.028:282): pid=23540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16210 res=1 errno=0
06:51:13 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$TCSETSW(r2, 0x5450, 0x0)

[ 1473.334881][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1473.654906][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:51:13 executing program 3:
r0 = eventfd2(0x0, 0x800)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
write$binfmt_misc(r0, &(0x7f00000004c0)={'syz1', "19df75fd"}, 0x8)

06:51:13 executing program 0:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0/file0\x00')

06:51:13 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
dup2(r2, r0)

06:51:13 executing program 5:
r0 = socket(0x1, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0)

06:51:13 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00')
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x5450, r2)

06:51:13 executing program 0:
creat(&(0x7f0000000080)='./file2\x00', 0x0)
sync()
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

06:51:13 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8903, &(0x7f0000000040)={'bridge_slave_1\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x5452, &(0x7f0000000000)={'wg0\x00'})
ioctl$int_out(r5, 0x6, &(0x7f0000000100))
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000180)={{0x1, 0x0, @descriptor="5eec38e6bd493c02"}})
r6 = openat(r1, &(0x7f0000000080)='/', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
ioctl$TCSETXF(r6, 0x5434, &(0x7f0000000140)={0x6, 0x101, [0x20, 0x1, 0xd44a, 0x5, 0xfde], 0xaa})
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
r7 = semget$private(0x0, 0x2, 0x33)
shmat(r7, &(0x7f0000fff000/0x1000)=nil, 0x1000)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff})
ioctl$RNDCLEARPOOL(r8, 0x5451, 0x0)

06:51:13 executing program 1:
r0 = socket(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)

06:51:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup3(r1, r0, 0x0)
getsockname(r2, 0x0, &(0x7f00000007c0))

06:51:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:51:13 executing program 1:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
inotify_init1(0x0)
fcntl$setlease(r0, 0x406, 0x0)

06:51:13 executing program 0:
r0 = eventfd2(0x0, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x2)

06:51:14 executing program 4:
r0 = getpid()
ptrace$peekuser(0x4206, r0, 0x0)

06:51:14 executing program 2:
r0 = memfd_create(&(0x7f0000000040)='\x00S\t\x8f\xd0\xd1\xf2\xb8\xdc\x13\xb0\xab\xfch\x15\xb2\x9d\xe2/\x11G\xd7\xf5\xbd%\xe7\xef\x1d\xba\xa6]\f0\xfd3\x8c\x7fM\xa2\x80<\xd8\x1c\xa0\'l\x9ci_\x89', 0x0)
write$cgroup_type(r0, 0x0, 0x0)

06:51:14 executing program 1:
pipe2$9p(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RLERROR(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, {0x1, '-'}}, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
dup2(r2, r0)

06:51:14 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f00000002c0)=""/4096)

06:51:14 executing program 3:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004100)={'team0\x00'})

06:51:14 executing program 2:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RRENAME(r0, &(0x7f00000000c0)={0x7}, 0x7)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:51:14 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

06:51:14 executing program 4:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
accept$unix(r1, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)

06:51:14 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:51:14 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
semget$private(0x0, 0x3, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/39)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x1, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, [], [{0x2ca, 0xfffffb0f, 0x800, 0x8, 0x10001, 0xfffffffffffffffc}, {0x9, 0x2, 0x8, 0x7, 0x8}], [[], [], []]})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x480000, 0x0)
add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="4e40b27d40b6e54e192106992cefe60f2c10482f07c48b8ddeefdecbb28fc28665886cc6e8454b7039e89eaa939e64980b1c74d58d3e558c783be68465c9eb9edfc10b9338e590fe256a949525efb0a0dad7042f25d43377bbac2dcbacdeeadeef37d3af28ffbda5ebe4abd3e36239dba5c97fa2e681d121745a9f1f17d89165c16279d394db9abc0049e27a127d8bde8d382fa4b27f79cf0db8fc1fa236247c7832b78474a5163298b8a41008bf", 0xae, 0xffffffffffffffff)
signalfd(r1, &(0x7f0000000400)={[0x3]}, 0x8)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
clock_gettime(0x0, &(0x7f00000004c0)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000500)={r2, r3/1000+10000}, 0x10)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
lsetxattr$security_ima(&(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000005c0)=@sha1={0x1, "909bf1be0e27a99478d9f4d61788e8310d0a2f40"}, 0x15, 0x6)
r4 = shmget(0x2, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
shmat(r4, &(0x7f0000ffe000/0x1000)=nil, 0x6000)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000600)={0x7, 0x9, 0x8, 0x0, 0x7fd, 0x7})

06:51:14 executing program 2:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
sync()
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file2\x00')
getxattr(0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000000)='./file2/file0\x00', 0x0, 0x0)

06:51:14 executing program 1:
clock_nanosleep(0x4, 0x0, &(0x7f0000000140), 0x0)

06:51:14 executing program 3:
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

06:51:14 executing program 5:
open(&(0x7f0000000040)='./file0\x00', 0x60c143, 0x0)
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x200081, 0x0)
sync()
link(0x0, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file1\x00')
lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x0)

06:51:14 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$P9_RAUTH(r1, &(0x7f0000000140)={0x14}, 0x14)
dup2(r1, r0)

06:51:14 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040), 0x2, 0x0)
fstatfs(r1, &(0x7f0000000000))

06:51:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
getresgid(&(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
fchown(r1, 0x0, r2)
ioctl$TCSBRK(r1, 0x5409, 0x7ffb)
ioctl$TIOCGLCKTRMIOS(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1300000038490000001f000000002000"})

06:51:14 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x8903, &(0x7f00000002c0)=ANY=[])

06:51:14 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0xc}, 0x0)

[ 1474.704882][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:14 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040))
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080))
ioctl$KDSETLED(r1, 0x4b32, 0x6)
ioctl$TCXONC(r0, 0x540a, 0x2)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x484481, 0x0)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000500)={0xa7, 0x12, &(0x7f0000000100)})
r3 = signalfd4(r2, &(0x7f0000000540)={[0x41]}, 0x8, 0x80800)
dup2(r0, r3)
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
close(r4)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000005c0)={0x2, 0x7, 0x2, 0x7, 0x4, "d0c5fdfe3db10eba"})
modify_ldt$write2(0x11, &(0x7f0000000600)={0x0, 0x100000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
keyctl$read(0xb, 0x0, &(0x7f0000000640)=""/4096, 0x1000)
prctl$PR_CAPBSET_READ(0x17, 0x1c)
semget(0x0, 0x4, 0x200)
newfstatat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x400)

06:51:14 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
sync()
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e)
getsockname$unix(r1, 0x0, &(0x7f0000000040))
ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="e6f20fe9", 0x4})

06:51:14 executing program 1:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
ioctl$CHAR_RAW_BSZGET(r1, 0x80081270, 0x0)

06:51:14 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}, {0x4, 0x20}], 0x2)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7f6e}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x42}, {0x4, 0x7}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x2}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:14 executing program 5:
sync()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00')
readlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0)
setpgid(0xffffffffffffffff, 0xffffffffffffffff)
lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x3)

06:51:14 executing program 1:
r0 = eventfd(0x80000002)
r1 = dup2(r0, r0)
write$nbd(r1, &(0x7f00000001c0), 0x10)
close(r1)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
clock_gettime(0x3, &(0x7f0000000000)={0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, r3+10000000}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:51:14 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='\f\xe6\x15\xd9\xed\x92\r\a\x14\xb2\x05\x83\xe1\n9Vp\xc6\xa3s\xbdf(\b\x0eWgv\x857m\a\f\xd4sN\x14\xae\x06\x00\v\x8e\x1cR\x88\x90m\x04\xd6\xc3J\xa3\"\x8cU\xce\xb0\xd7\x9b\x88dv\xb2*\x18\xfa\xb66\x04(\xcbeU\xa1\x1b\xfd\x8c\xe2 u*\xa1\xf7~\xba\xd1\xfd_\xdf_;\xdd \xa5|\x02\xd8\xd3\x94\x84\xa3\x94\xa5\x92\x86Wr\xb0\xc0\xa2\xbeg\xdc\xc4@\xdb\bt\xcdQM\n\xab\\\xce\x9d\xd7a\\\xadL\x82x\xa1j\xd3\x1c\x1a\xa4M\x11\x13_hq\a\xa3]\x9d\xb2\xff\xd2lM\x1f\xc1\x8c|\xe6\xec\xf8\'\xae\x0f\xa5X\xe7\xf6\xd2 .\v\xe5\xb3\x98\x16Z\xa6\"\x12;\xc6=\x7f\xf5\x8a\x00\xe2\xaa\xedz\xfdQ\xfe\xb0i\x89)=U\x7f%\xfd\x0e\x89 \xe6\x10\xc7\x85\xf2\x1b\xe9\xb9\xc0\x8e>\n } \xdd\xcc\xa9\xb4]IY?\x9dkNMc\x16\xc9\x8d%\xf2\xb8\xb2\x8d\xdb\x14\xe7\x1b\xd2\x9c\\\xc3Q$\xff\nkw\x1d\"\x05\xae\x9de\xe6\x1b\x17f\x8c\xa9\xd4\xa3\x1eu\xbaVX\x9c\x04\xa0il\\r\x8e\xae*\x9b\xe0\xc4]\xe6\x9f]\x9e\a\xf3\x98\xb8\x11\x19\xd0\xa7\x98\x97\xab\x94\xbc&\x0e{q\xe4Ww\xe4\xaa\"&@\xb7\x0e\xe6\x10p\x87\xb4\x1e\x05\xa3[\xfe\x81\x1b\xed\x0f/\x18\xd5\a\xe2|d\\\xb0;\x9a\a\xf1$\xec', 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451)

06:51:14 executing program 3:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x110)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="5b80cc01d4058c69e4066c0ba3e846fabbce77e0c6cfdcab2dd3fa64ace759a45098a390314e0fe03472c401d0740b608b7b61f5b83214bf70980ceeb1aa")
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfffffffffffff676]}, 0x8, 0x100800)
ioctl$FIOCLEX(r1, 0x5451)
getpid()
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000140))
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x30100, 0x0)
ioctl$KDENABIO(r3, 0x4b36)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000240)={&(0x7f0000000200)=""/20, 0x14})
pipe2$9p(&(0x7f0000000280), 0x80800)
signalfd(r0, &(0x7f00000002c0)={[0x81]}, 0x8)

06:51:15 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f0000000180))

06:51:15 executing program 3:
r0 = eventfd(0x0)
close(r0)
timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)

06:51:15 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x8903, &(0x7f00000002c0)=ANY=[])

06:51:15 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
fdatasync(r1)

06:51:15 executing program 5:
sync()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00')
readlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0)
setpgid(0xffffffffffffffff, 0xffffffffffffffff)
lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x3)

06:51:15 executing program 4:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$P9_RGETLOCK(r1, &(0x7f0000000100)={0x1f, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, '#'}}, 0x1f)
dup2(r1, r0)

06:51:15 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x5421, &(0x7f0000000000)={'netpci0\x00', {0x2, 0x0, @multicast1}})

06:51:15 executing program 0:
sync()
openat(0xffffffffffffffff, &(0x7f0000000040)='/', 0x40cc2, 0x0)

06:51:15 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000)

06:51:15 executing program 5:
creat(&(0x7f0000000980)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x4, &(0x7f0000001d00))

06:51:15 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x8000, 0x108)

06:51:15 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
r1 = dup(r0)
fdatasync(r1)

06:51:15 executing program 3:
mknod(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK/file1\x00', 0x0, 0x0)

06:51:15 executing program 4:
sync()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)

[ 1475.734839][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:15 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000001040)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
statx(r1, &(0x7f0000001240)='./file0\x00', 0x4000, 0x80, &(0x7f0000001280))

06:51:15 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r0)
setrlimit(0x7, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')

06:51:15 executing program 4:
r0 = creat(&(0x7f0000001300)='./file0\x00', 0x0)
write$9p(r0, 0x0, 0x0)

06:51:15 executing program 3:
sched_setaffinity(0x0, 0x424, 0x0)

06:51:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$netlink(r0, 0x0, &(0x7f0000000480))

06:51:15 executing program 2:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00')
unlinkat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x0)

06:51:16 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
rename(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x0)

06:51:16 executing program 3:
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:51:16 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
syncfs(r0)
close(r0)
setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a})
epoll_create1(0x0)

06:51:16 executing program 1:
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2)

06:51:16 executing program 3:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004a00)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$notify(r0, 0x0, 0x0)

06:51:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x140042, 0x0)
r2 = dup(r1)
sendfile(r0, r2, 0x0, 0x0)

06:51:16 executing program 0:
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

06:51:16 executing program 4:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x541b, 0x0)

06:51:16 executing program 2:
sync()
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)

06:51:16 executing program 0:
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

06:51:16 executing program 5:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

06:51:16 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff)

06:51:16 executing program 1:
get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3)

06:51:16 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0xfffffd5c, 0x0)

06:51:16 executing program 0:
r0 = eventfd(0x0)
write$P9_RLOCK(r0, &(0x7f0000000040)={0x8}, 0x8)

06:51:16 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='#em\x06\x00\x00\x00', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
write$binfmt_misc(r0, 0x0, 0x0)

06:51:16 executing program 3:
sync()
mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x0, 0x1)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00')
removexattr(&(0x7f0000000040)='./file1/../file0/file0\x00', 0x0)

06:51:16 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x9}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7f7e}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x111f61, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)

06:51:16 executing program 0:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
close(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x5450)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x5450)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x5450)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x100)
setgid(r3)
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0)
setuid(r5)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)

06:51:16 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_proto_private(r0, 0x5452, 0x0)

06:51:16 executing program 2:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
splice(r1, 0x0, r2, 0x0, 0x0, 0x0)

06:51:16 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0x40, 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')

06:51:16 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1010c1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)

06:51:16 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
sync()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r2, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
futimesat(r1, 0x0, 0x0)

06:51:16 executing program 3:
open$dir(&(0x7f0000000240)='./file0\x00', 0xc0ac1, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0xdca82befd7d3b7fc)

06:51:16 executing program 2:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)

06:51:16 executing program 3:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
wait4(r0, &(0x7f0000000040), 0x4, 0x0)
rt_sigqueueinfo(0x0, 0xb, &(0x7f00000000c0)={0xc, 0x81, 0x3})
gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffffffc1)
r1 = dup(0xffffffffffffffff)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000300)={0x4a, 0x5, 0x800, 0x70e0, 0x8000})
inotify_init1(0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0)
signalfd(r2, &(0x7f0000000380)={[0x8]}, 0x8)

06:51:16 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
fadvise64(r0, 0x0, 0x0, 0x0)

[ 1476.374956][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.774931][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="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", 0x4ab, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000500), 0x400000000000281, 0x0)

06:51:17 executing program 2:
mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000002c0), 0x200, 0x1)

06:51:17 executing program 3:
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup2(r1, r1)
r3 = dup3(r0, r2, 0x0)
lseek(r3, 0x0, 0x0)

06:51:17 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)

06:51:17 executing program 5:
r0 = socket(0x1, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0)

06:51:17 executing program 0:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x15e, 0x37, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x93}}, 0x0)

06:51:17 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x4000, &(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e)

06:51:17 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
sync()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r2, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
futimesat(r1, 0x0, 0x0)

06:51:17 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
close(r1)
open(&(0x7f0000000140)='.\x00', 0x143042, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:17 executing program 4:
r0 = gettid()
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r2, 0x0, r1, 0x0, 0x800000055aa40c1, 0xc)
r4 = dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x541b, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x5452, 0x400000)
ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x4000009)
timer_create(0x2, 0x0, 0x0)
clock_gettime(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000280))
timer_create(0x7, 0x0, &(0x7f0000000340))
timer_settime(0x0, 0x0, &(0x7f000006b000), 0x0)
tkill(r0, 0x1000000000016)

06:51:17 executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00')
fstatfs(r0, &(0x7f00000000c0)=""/219)

06:51:17 executing program 2:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$FICLONE(r2, 0x5451, r3)

06:51:17 executing program 2:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sync()
rename(0x0, &(0x7f0000000540)='./file1\x00')
lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=@random={'user.', 'sb\nQ\xa1\x1c\x84H\xed\xe18\xf8\x1f\xe1K\xe8\xd6n\xda\x88\xad\xb0b\x05$\xa6z5\xf1<\xf8\xbe\xd1\x92^m\xeb\xd4\x9d>\x96\x06\x17 x\xd4\x10\xa9\xfb\x12\xb24\x17u\x96\xf4\xb5\x1a5\xbc{\xe1\xcd\x14\xbe\xf7\xea\x98\xdb\xb64Of\xeea\xebj\x92\xd8\x9ag\x8b\xaen\xf4\x1dC\xa0F9\x96&\xfa\a\x00\x00\x00\x00\x00\x00\x00zUB\xddw\xe1\x7f\x14\x06\x99\xadV\x86\fo\xc9s\x92]E\xd8\xee\x11\xf2T\xef\xd0\x84\x99p\xdf\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97\xc3\xb4x\xa0\xde\xc6a\x89\xea\xbaN\b\xc0P<Z\x00\x87\xe91\xd5[\xaf\xd5\x1a2[\xaeo\x05\x00\x00\x00\x00\x00\x00\x00O]\xe7\xf9\xcd\xee\xb0\xa2\x00\x80\xb7$\x8e4\xd0\xe3\xe1\x03\xb8\xe6l8\xab\xb7\xc7\x8b\xde\xb8\xcb\x81\x02o\x9eZ*\xe5\xc22\xac\x17g\xc0-\xd5\b\xe64\xddG\xf1\xbd\xf2\x86\x03\xeapctkk\xe7\xb7\xd6\x00'/257})
prctl$PR_GET_FPEMU(0x9, 0x0)

06:51:17 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
ioctl$TIOCGSERIAL(r0, 0x541e, 0x0)

06:51:17 executing program 5:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:17 executing program 3:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000100))

06:51:17 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}, {0x4, 0x20}], 0x2)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x7f78}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:17 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
getpeername(r2, &(0x7f0000009340)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000093c0)=0x80)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000009400))

06:51:17 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x70a9}, {0x4, 0x400}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1477.814854][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:18 executing program 1:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RMKNOD(r0, &(0x7f0000000180)={0x14}, 0x14)

06:51:18 executing program 2:
sync()
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', 0x0, 0x15, 0x0)
lstat(&(0x7f0000000c80)='./file0\x00', 0x0)
setgid(0x0)
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x5451)
truncate(0x0, 0x0)

[ 1478.855561][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1479.015638][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1479.414909][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1479.894857][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:20 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = inotify_init()
r2 = dup2(r1, r0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x541b, 0x0)

06:51:20 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
fcntl$getown(r0, 0x9)

06:51:20 executing program 5:
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000006c0)=""/70)

06:51:20 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14}, 0x14)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
tkill(r0, 0x1000000000016)

06:51:20 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140))
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0xfffffebd)
write$P9_RLOCK(r0, &(0x7f0000000180)={0x8}, 0x8)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x404542, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000016)

06:51:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x89a1, 0x0)

06:51:20 executing program 1:
r0 = epoll_create1(0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r1)
fcntl$notify(r0, 0x0, 0x0)

06:51:20 executing program 0:
r0 = inotify_init()
r1 = dup(r0)
ioctl$VT_RESIZEX(r1, 0x541b, &(0x7f0000000040))

06:51:20 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
dup3(r0, r1, 0x0)
pread64(r1, 0x0, 0x0, 0x0)

[ 1480.270691][   T28] audit: type=1804 audit(1601275880.278:283): pid=23861 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16150 res=1 errno=0
06:51:20 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
write$P9_RRENAMEAT(r1, 0x0, 0x0)

06:51:20 executing program 0:
r0 = epoll_create(0x3)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

[ 1480.305756][   T28] audit: type=1804 audit(1601275880.318:284): pid=23866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16150 res=1 errno=0
06:51:20 executing program 4:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setreuid(0x0, r1)
fremovexattr(r0, &(0x7f00000000c0)=@random={'btrfs.', 'trusted.syz\x00'})

06:51:20 executing program 2:
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
unlink(&(0x7f00000005c0)='./file0/file0\x00')

06:51:20 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_ROPEN(r0, 0x0, 0x206)

06:51:20 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
fchmodat(r3, &(0x7f00000000c0)='./file0\x00', 0xe4)
r4 = dup2(r1, r2)
write$P9_RXATTRWALK(r4, 0x0, 0x0)
ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000040))
symlinkat(&(0x7f0000000280)='./file2\x00', r0, &(0x7f0000000100)='./file2\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x1d)

06:51:20 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x60c143, 0x0)
mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

[ 1480.473646][   T28] audit: type=1804 audit(1601275880.478:285): pid=23895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16280 res=1 errno=0
06:51:20 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x10100, 0x0)
open_by_handle_at(r1, &(0x7f00000000c0)={0x17, 0xdce8, "ad97edc14329de0c72e74c21c39686"}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=@nl, 0x719000)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xc8400, 0x0)
ioctl$RNDGETENTCNT(r2, 0x5452, &(0x7f0000000240))

06:51:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$P9_RWSTAT(r0, 0x0, 0xffed)

06:51:20 executing program 5:
sync()
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00')
chroot(&(0x7f0000000080)='./file1\x00')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

06:51:20 executing program 1:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$P9_RLOCK(r0, 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x47f7a720]}, 0x0, &(0x7f00000000c0), 0x8)

06:51:20 executing program 0:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8132, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

06:51:20 executing program 4:
prlimit64(0x0, 0x9, &(0x7f0000000040), 0x0)
io_setup(0x0, &(0x7f0000000080))

[ 1480.506912][   T28] audit: type=1804 audit(1601275880.488:286): pid=23899 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16279 res=1 errno=0
06:51:20 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
getsockname$unix(r0, 0x0, &(0x7f0000000100))

06:51:20 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r1, r0, 0x0)
accept4(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
dup2(r2, r3)

06:51:20 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

06:51:20 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)

06:51:20 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
ioctl$FIDEDUPERANGE(r0, 0x5451, 0x0)

06:51:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$TIOCGETD(r0, 0x5452, 0x0)

[ 1480.637324][   T28] audit: type=1804 audit(1601275880.648:287): pid=23921 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15792 res=1 errno=0
[ 1480.671574][   T28] audit: type=1804 audit(1601275880.668:288): pid=23925 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15792 res=1 errno=0
[ 1480.945287][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:21 executing program 3:
clock_getres(0x5, &(0x7f0000000100))

06:51:21 executing program 0:
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
getgroups(0x1, &(0x7f0000004d00)=[<r1=>0x0])
fchownat(r0, &(0x7f0000000000)='\x00', 0x0, r1, 0x1000)

06:51:21 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}, {0x4, 0x2}, {0x4, 0x3}], 0x3)
semop(r0, &(0x7f0000000000)=[{0x4, 0x7f3b}, {0x4, 0x2}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x6}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:21 executing program 4:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x20000000, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)

06:51:21 executing program 1:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

06:51:21 executing program 5:
r0 = eventfd(0x80008003)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r3, 0x409, 0x6)
write$cgroup_int(r2, &(0x7f0000000000), 0x12)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:21 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
sendfile(r2, r1, 0x0, 0x0)

06:51:21 executing program 4:
r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x0)
close(r0)
close(0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

06:51:21 executing program 1:
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_aout(r0, 0x0, 0x0)

06:51:21 executing program 0:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0)

06:51:21 executing program 3:
r0 = timerfd_create(0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x820040, 0x0)
r2 = dup3(r1, r0, 0x0)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x0)

06:51:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

06:51:21 executing program 4:
r0 = epoll_create1(0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000180))

06:51:21 executing program 0:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000001140)='./file0/file0\x00')
lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffeb9, 0x0)

[ 1481.974796][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:22 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
sendto(r0, &(0x7f0000000200), 0xfffffc9a, 0x0, 0x0, 0x310)

06:51:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = timerfd_create(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$binfmt_aout(r2, 0x0, 0x0)

06:51:22 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9aec485ad7976ecb, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

06:51:22 executing program 4:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
r3 = dup(r0)
ioctl$TIOCSISO7816(r3, 0x541b, 0x0)

06:51:22 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000080)=0x6, 0x1000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8901, &(0x7f0000000480)={'veth1_vlan\x00', 0x0})
ioctl$TCSETX(r0, 0x5450, 0x0)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendto$unix(r2, &(0x7f0000000200), 0xfdf0, 0x0, 0x0, 0x4f9c824f39a9a2a1)
sendmmsg$sock(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='0', 0xfffffe1d}], 0x1}}], 0x1, 0x40)
semget(0x0, 0x1, 0x20)

06:51:22 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)

06:51:22 executing program 1:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x805c2, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)

06:51:22 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x5451, 0x0)

06:51:22 executing program 3:
semget(0x2, 0x2, 0x220)

06:51:22 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000))

06:51:22 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0)

06:51:22 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000100))

06:51:22 executing program 0:
memfd_create(&(0x7f00000000c0)='bdev\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
semget(0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchownat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

06:51:22 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000004c0))

06:51:22 executing program 2:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0)
fdatasync(r0)

06:51:22 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
fcntl$getflags(r1, 0x0)

06:51:22 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00')
ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f00000001c0))

06:51:22 executing program 5:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x84800)
ioctl$RNDADDTOENTCNT(r0, 0x5452, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x81)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101140, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000200))
r2 = open(&(0x7f0000010440)='.\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000010480)='./file0\x00', 0x0)
dup2(r2, r3)
statx(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x800}, 0x8})
r4 = semget$private(0x0, 0x4, 0x0)
shmctl$SHM_UNLOCK(r4, 0xc)
r5 = creat(&(0x7f0000010480)='./file0\x00', 0x0)
dup2(0xffffffffffffffff, r5)
r6 = open(&(0x7f0000010440)='.\x00', 0x0, 0x0)
r7 = creat(&(0x7f0000010480)='./file0\x00', 0x0)
dup2(r6, r7)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000e80))

06:51:22 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/self\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000003840)=""/233, 0xe9)

06:51:22 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r1)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x5450, 0x0)

06:51:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000005)
fstatfs(r1, &(0x7f0000000140)=""/173)

06:51:22 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KDDISABIO(r2, 0x541b)

06:51:22 executing program 4:
r0 = inotify_init1(0x0)
close(r0)
open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff)

[ 1482.454900][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:22 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
fchownat(r0, &(0x7f0000000200)='\x00', 0xffffffffffffffff, 0x0, 0x1000)

06:51:22 executing program 1:
sync()
symlink(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000080)='./file2\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:22 executing program 2:
setrlimit(0x2, &(0x7f0000000080))

06:51:22 executing program 4:
r0 = eventfd(0x0)
r1 = dup(r0)
write$P9_RFLUSH(r1, 0x0, 0x0)

06:51:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80)
ioctl$sock_SIOCGIFBR(r1, 0x5451, 0x0)

06:51:22 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x401c0, 0x80)

06:51:22 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x776}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x1a1843, 0x0)
write$eventfd(r1, 0x0, 0x0)

06:51:22 executing program 3:
r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
close(r0)
epoll_create1(0x0)
epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:51:22 executing program 0:
sync()
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000040)='./file2\x00')
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

06:51:22 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000740)='io\x00')
write$cgroup_devices(r0, 0x0, 0x0)

06:51:22 executing program 1:
r0 = inotify_init1(0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300))

06:51:22 executing program 0:
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1, 0xb37, 0x0)

06:51:22 executing program 1:
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x852c5a8fcfb0f432, 0xffffffffffffff9c, 0x0)

06:51:22 executing program 4:
prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create(0x10001)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r2=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000140))
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

06:51:22 executing program 2:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r2)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0)

06:51:22 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002680)='/proc/self\x00', 0x0, 0x0)
r1 = dup(r0)
fchdir(r1)

06:51:22 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000340), 0x8)
r2 = dup3(r0, r1, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x5451)

[ 1483.014816][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:23 executing program 3:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
fchmod(r0, 0x0)

06:51:23 executing program 5:
memfd_create(&(0x7f00000000c0)='bdev\x00', 0x0)
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

06:51:23 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$FICLONERANGE(r2, 0x5450, 0x0)

06:51:23 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71ad}, {0x4, 0x1c5}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x4, 0xc8}, {0x4, 0x6}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:23 executing program 1:
memfd_create(&(0x7f00000000c0)='bdev\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$TCSETX(r2, 0x5450, 0x0)
utimensat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

06:51:23 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
write$nbd(r1, 0x0, 0x0)

06:51:23 executing program 3:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
fchmod(r0, 0x0)

06:51:23 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)

06:51:23 executing program 4:
r0 = getpgid(0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = getpgrp(0x0)
fcntl$setown(r1, 0x8, r2)
r3 = fcntl$getown(r1, 0x9)
rt_tgsigqueueinfo(r0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffeffff})

06:51:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5450, 0x0)

06:51:23 executing program 3:
r0 = inotify_init()
sync()
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = timerfd_create(0x0, 0x0)
dup3(r1, r2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
utimensat(r0, 0x0, 0x0, 0x0)

06:51:23 executing program 1:
sync()
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000180)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e)

06:51:23 executing program 2:
sync()
symlink(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
statfs(&(0x7f0000000100)='./file2\x00', 0x0)

06:51:23 executing program 5:
memfd_create(&(0x7f00000000c0)='bdev\x00', 0x0)
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

[ 1484.064788][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:24 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TIOCGSID(r0, 0x5451, 0x0)

06:51:24 executing program 3:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x14)
ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0))
syz_open_dev$ptys(0xc, 0x3, 0x1)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x81)

06:51:24 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$P9_RWSTAT(r2, 0x0, 0x0)

06:51:24 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\xb3x^\xf2]@\x9f\x14\x81O\x04-x\x9e\xf1\xd9\x85\xe1%\x89\xa3\xbc\xab\xc7C\xb5U!\xfdbL?\x05`\x818yv=\xb3\x1b=\x9d\xbd)\xb6em\x904jv?B\x03v\xe6\x18\x9f.\b\t\x1f\xb1*\x04\x00\x00\x00\x00\x00\x00\x00\x9a\x1f:(\xfdc\x99\x15\xe3B\xcc\x92\xef+\x98\xb8]\xdaM\xa2\x01r\xf9=W\x97#\x1f+\x1c\x18\x013?7\x82\x8e?\aw13!\a\x15\xd3\xa4n\x84\xf6\x16\xe2\x87MW\x8a\xe9Z\xbd\x01\x01\x92t\x90\xfdK\x1bX8\x0f\xcbli\xc7\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xca\xe9P\x1c\x14\xb4s\x85@\xf5U![A\x1a\x19:Q\xe8\xaf\x1c8\xd1\xaeM9c=4\xca(\x1b\xd0>I`d5\xa5\xe94\xdd\xdaz\xde9oh\xb6q\xfa\x87+u\xa7x\x18\xeb\x00\xc7q\xf7~\xc3\xbe9PUx', 0x0)
write$eventfd(r0, &(0x7f0000000080), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xfeff)
lseek(r0, 0x0, 0x0)

06:51:24 executing program 2:
sync()
symlink(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)
statfs(&(0x7f0000000100)='./file2\x00', 0x0)

06:51:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0)

06:51:24 executing program 3:
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xc9c61e7165e075ea, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000500))

06:51:24 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
getsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000180), &(0x7f0000000200)=0x4)

06:51:24 executing program 0:
r0 = timerfd_create(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
timerfd_settime(r2, 0x0, &(0x7f0000000040), 0x0)

06:51:24 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000002c0))
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/92)
r1 = signalfd4(r0, &(0x7f0000000100)={[0x22]}, 0x8, 0x800)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
dup(r3)
write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x7, 0x0, 0x9, 0x0, 0x3e, 0x2, 0xde, 0x40, 0x97, 0x3, 0x2, 0x38, 0x2, 0x1, 0xfffa, 0x4}, [{0x60000000, 0x0, 0x0, 0x0, 0x97, 0x1f, 0x3}], "fa97a37257c4b78c452aec3f", [[], [], [], [], [], []]}, 0x684)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000180)="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")
dup(r2)
dup2(r2, r1)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000280)={0xffffffff, 0x9})
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/92)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'veth1_macvtap\x00', {0x6}})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, 0x0, r5)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a00)={0xa0, 0x19, 0x0, {0x1868, {0x8, 0x0, 0x8}, 0x61, 0xffffffffffffffff, r5, 0xbd, 0x1, 0x3, 0x100000001, 0x0, 0x5, 0x9, 0x0, 0x0, 0x804, 0x99, 0x9, 0xc6e0, 0x2, 0xe1}}, 0xa0)

06:51:24 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$P9_RGETATTR(r1, 0x0, 0x0)

06:51:24 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x17fe, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)

06:51:24 executing program 4:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$VT_RELDISP(r0, 0x5605)

06:51:24 executing program 2:
r0 = eventfd(0x0)
r1 = dup(r0)
ioctl$CHAR_RAW_IOOPT(r1, 0x8903, 0x0)

06:51:24 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451)

06:51:24 executing program 1:
r0 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'sp\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Xy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x04\x1a\x13\xd1+gh\xce\xca&);\x1br\xd2a\xf2\x89\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xf4\x89Ou\xe3\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12\x83BD\xadN\x8d\x06\x00\xdb\x97s\xb3-i\xa6\x83\xd6\x9c\xf3L\xe9\xf1\x8bI\x85\x8b\xe4\xb6 \x8dI|\x1c\x14\x10g\x9dX\xd0a\x1f\x17\xddH\x81o\xe7\x87%\xf9\x0e\xcd\xa7\x00\xd2K\xa4\xa4\x80\xa4\x86R\xb9\x8d\xe53\x18`\x876\'\x1f\x86M\xfe\x86VXv\x05\x16\x19-\xc2V\x1d\xa3\x99\xe7\xcf\xf8\xe5\xca\x93Z\xcb\x98rZ\xa59`\x9d\xcd\x1fT{\xc1ZtfH\'\x171\xc19\x96\xf7\xa6^\xd8\xe9<9\xf1\x14!\xcc\xe1FFa\xf0FI\xbf\xaa\x1c\x99\xd9q!\xe9\xd2\x156\x8f\x10\xcc\xb4\xbc[\xfa`\x0f\xffi\x95\x8aR\xbc\xd5e\vgYl\xdf\x0e0\xf2ZN\xfa\x16\xa6OV\xa1\xc4\x7f\x89\x15EJ\x81\xf8\xa0USx\xc3#\x1c\x1f\x1ab\xb4\x12j\x89\xd6!\x04x0\xefY\xc1\xca\xbe\xcb\x94\x97zP#?\xff\xfd\r\x10\xef\xcd\v\xc9\xc49H\x11bk\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$TIOCPKT(r1, 0x5452, &(0x7f0000000180))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$TIOCPKT(r2, 0x5452, &(0x7f0000000180))
dup3(0xffffffffffffffff, r2, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$TIOCPKT(r3, 0x5452, &(0x7f0000000180))
lsetxattr$security_capability(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x1)

06:51:24 executing program 3:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = inotify_init()
r2 = dup2(r0, r1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541b, 0x0)

06:51:24 executing program 2:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(0x0, &(0x7f0000000200)='./file0\x00')
r0 = inotify_init1(0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
listxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=""/80, 0x50)

06:51:24 executing program 4:
r0 = epoll_create(0x5)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendto(r0, 0x0, 0x0, 0x20000081, 0x0, 0x0)

06:51:24 executing program 0:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
readv(r0, &(0x7f0000000140), 0x0)

06:51:24 executing program 5:
r0 = getpgrp(0x0)
ptrace$peekuser(0x4206, r0, 0xfffffffffffffff8)

06:51:24 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x41, 0x0)
write$P9_RLINK(r0, 0x0, 0x0)

06:51:24 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r0, 0x0, 0x0, 0x0)
fstat(r2, &(0x7f0000000080))

06:51:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
ioctl$sock_SIOCETHTOOL(r0, 0x5451, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x80, 0x0)
r1 = socket$unix(0x1, 0x0, 0x0)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
umount2(0x0, 0x0)
setuid(r2)
mount$9p_virtio(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x40000, &(0x7f0000000100)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x9}}, {@afid={'afid', 0x3d, 0x6}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})

06:51:24 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2c0, 0x0)

06:51:24 executing program 2:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(0x0, &(0x7f0000000200)='./file0\x00')
r0 = inotify_init1(0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
listxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=""/80, 0x50)

06:51:24 executing program 1:
r0 = getpid()
ptrace$setregset(0x4206, r0, 0x2, 0x0)

06:51:25 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

06:51:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$KDMKTONE(r2, 0x541b, 0x20000006)

06:51:25 executing program 0:
r0 = eventfd(0xfbfffff8)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18}, 0xffffff88)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
close(r1)
signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:51:25 executing program 2:
sync()
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00')
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, 0x0)

06:51:25 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5451, 0x0)

06:51:25 executing program 5:
sync()
rename(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x2)

06:51:25 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
fchdir(r0)
sync()
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local, 'bond0\x00'}}, 0x80)

06:51:25 executing program 3:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
r1 = inotify_init1(0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

06:51:25 executing program 0:
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:25 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040))

06:51:25 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0)
syncfs(r1)
close(r1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5451, 0x0)

[ 1485.095660][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:25 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4$unix(r1, 0x0, &(0x7f0000000240), 0x800)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:51:25 executing program 3:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r2 = dup2(r1, r0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x5450, 0x0)

06:51:25 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x80)

06:51:25 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
sendmsg(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)

06:51:25 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
writev(r0, 0x0, 0x0)

06:51:25 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x5450, 0x0)

06:51:25 executing program 3:
socket$unix(0x1, 0x1000000000001, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x10000, 0x80)
fchdir(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)
recvfrom(r1, &(0x7f0000000a40)=""/4096, 0x1000, 0x61, &(0x7f00000001c0)=@hci={0x1f, 0x1, 0x2}, 0x80)

06:51:25 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
syncfs(r0)
setresuid(0x0, 0xee01, 0xee01)
syz_open_procfs(0x0, &(0x7f0000000600)='ns\x00')

06:51:25 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
sendto(r0, 0x0, 0x0, 0x24000010, 0x0, 0x6)

06:51:25 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

06:51:25 executing program 2:
sync()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
chmod(&(0x7f0000000040)='./file0/../file0\x00', 0x0)

06:51:25 executing program 4:
mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

06:51:25 executing program 1:
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RREADDIR(r0, 0x0, 0x0)

06:51:25 executing program 0:
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000})

06:51:25 executing program 3:
r0 = eventfd2(0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x5451)

06:51:25 executing program 5:
r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$P9_RATTACH(r2, 0x0, 0x0)

06:51:25 executing program 1:
gettid()
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)={{0x108, 0x2, 0x1, 0x2dc, 0x0, 0x7, 0x3a2, 0x2}, "1d7e64dd0b8f7f384a2987d3d342c124886a8d1599ec613515619dab3cf090614cee512637ff848408cd7fd511cf960a1b300ba5aea547435cfcb1ed80f1a9376c18f6b533", [[]]}, 0x165)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180))
r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x80, 0x80800)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000280))
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x42)
ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000300))
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0xbd9, 0x3, 0x800, 0x7, 0x5, "07f497777d58d0dceabc910f0d3dfac1ddbcac", 0x2e, 0x2})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x2c2140, 0x0)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000480), 0x4)
r4 = accept$unix(r1, &(0x7f00000004c0), &(0x7f0000000540)=0x6e)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000580))
arch_prctl$ARCH_GET_CPUID(0x1011)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSIG(r5, 0x40045436, 0x23)
dup3(r2, r0, 0x0)
r6 = inotify_init1(0x80800)
inotify_add_watch(r6, &(0x7f0000000600)='./file0\x00', 0x40)

06:51:25 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)

06:51:25 executing program 1:
sync()
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x126)

06:51:25 executing program 3:
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$setflags(r0, 0x2, 0x1)

06:51:25 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
sync()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
r2 = gettid()
fchmod(r1, 0x0)
tkill(r2, 0x7)

06:51:25 executing program 5:
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
chown(&(0x7f0000000040)='./file0\x00', 0x0, r0)

[ 1485.495550][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:26 executing program 2:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000200)='c', 0x1, 0x30000000, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

06:51:26 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$TCGETS2(r0, 0x5452, &(0x7f0000000280))

06:51:26 executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$KDSETLED(r0, 0x5450, 0x0)

06:51:26 executing program 1:
r0 = socket$unix(0x1, 0x200000000001, 0x0)
r1 = dup2(r0, r0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syncfs(r2)
close(r2)
ioctl$NS_GET_NSTYPE(r1, 0x5450, 0x719000)

06:51:26 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r2 = dup3(r0, r1, 0x0)
write$P9_RLOPEN(r2, 0x0, 0x0)

06:51:26 executing program 4:
sync()
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x12)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

[ 1486.134728][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:26 executing program 0:
sync()
symlink(&(0x7f00000000c0)='./file2/file0\x00', &(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
readlink(&(0x7f0000000080)='./file2/file0\x00', 0x0, 0x0)

06:51:26 executing program 4:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')
unlink(&(0x7f0000000100)='./file0/file0\x00')

06:51:26 executing program 3:
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7)

06:51:26 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
write$P9_RMKNOD(r1, 0x0, 0x0)

06:51:26 executing program 2:
r0 = eventfd2(0xfffff509, 0x80800)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)="157c7d64060b82cc", 0x8}], 0x1)

06:51:26 executing program 3:
signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)

06:51:26 executing program 0:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mount$9p_virtio(&(0x7f0000000080)='syz\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0)

06:51:26 executing program 2:
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0x1, [], "2e7970154b09ff7e8a312d4e2e0a4375"})
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r2, 0x0, 0x0)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r3, 0x0, 0x0)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r4, 0x0, 0x0)
pipe2$9p(&(0x7f00000003c0), 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0x5421, &(0x7f00000000c0))

06:51:26 executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0xed68e32d2f27c79, 0x1c0)

06:51:26 executing program 4:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5450, 0x0)

06:51:27 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r1, r0, 0x0)
r2 = accept$unix(r0, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r2, 0x8901, &(0x7f0000000000))

06:51:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480841, 0x0)
write$P9_RCREATE(r0, 0x0, 0x0)

06:51:27 executing program 0:
sync()
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1213c1, 0x0)

06:51:27 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCGETA(r2, 0x5421, &(0x7f0000000000))

06:51:27 executing program 3:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
dup3(r0, r1, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080), 0x4)

06:51:27 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x1}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7e7a}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:27 executing program 0:
sync()
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1213c1, 0x0)

06:51:27 executing program 3:
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000040)=""/144, 0x90)

06:51:27 executing program 2:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
setxattr$security_evm(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x4, 0x4)

06:51:27 executing program 4:
timer_create(0x4, 0x0, &(0x7f0000000180))

06:51:27 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x2, 0x0)
dup2(r0, r1)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))

[ 1487.177087][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:27 executing program 3:
r0 = inotify_init1(0x0)
syncfs(r0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='fd/3\x00')

06:51:27 executing program 4:
r0 = eventfd(0xfffffbfd)
r1 = gettid()
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RREAD(r2, &(0x7f0000000080)={0xb}, 0xb)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
fcntl$setstatus(r0, 0x4, 0x800)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:27 executing program 5:
getpgrp(0x0)
tgkill(0x0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x108)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100))
syz_open_dev$tty20(0xc, 0x4, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')

06:51:27 executing program 2:
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RWALK(r0, &(0x7f0000000040)={0x9}, 0x9)

06:51:27 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x101})
socket$unix(0x1, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x341000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000008d00)='./file0\x00', 0x14802, 0x0)

06:51:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$P9_RSTAT(r0, 0x0, 0xfddf)

06:51:28 executing program 1:
sync()
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffe62)

06:51:28 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa14105ea353fc7c7, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

06:51:28 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x323001, 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

06:51:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup(r0)
sendmmsg(r1, 0x0, 0x0, 0x0)

06:51:28 executing program 3:
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000200)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x9, 'pids.max\x00', 0x27f, 'pi@s.may\x00', 0x9, 'pids.max\x00', 0x5, 'bdev:'}}, 0x0)

06:51:28 executing program 5:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = dup2(r1, r2)
r4 = dup2(r3, r0)
write$P9_RXATTRWALK(r4, 0x0, 0x0)

06:51:28 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fdatasync(r0)

06:51:28 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup2(r0, r1)
write$P9_RVERSION(r2, 0x0, 0x0)

06:51:28 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$CHAR_RAW_ZEROOUT(r0, 0x127f, 0x0)

06:51:28 executing program 2:
open(&(0x7f0000000040)='./file0\x00', 0x1814c2, 0x10)

06:51:28 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x78c5}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x7f}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1488.120869][   T28] audit: type=1804 audit(1601275888.128:289): pid=24416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=15967 res=1 errno=0
06:51:28 executing program 2:
r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$9p(r2, 0x0, 0x0)

06:51:28 executing program 0:
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
setpgid(0x0, r1)

06:51:28 executing program 1:
r0 = getpid()
ptrace$getsig(0x4206, r0, 0x5, 0x0)

[ 1488.162957][   T28] audit: type=1804 audit(1601275888.168:290): pid=24423 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=15967 res=1 errno=0
06:51:28 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0xc)
sched_getparam(r1, &(0x7f0000000100))

06:51:28 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000140)=[{0x4, 0x8000}, {0x4, 0x9}], 0x2)
semop(r0, &(0x7f00000001c0)=[{0x4, 0x70b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:28 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
dup2(r1, r0)
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

06:51:28 executing program 4:
pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$nbd(r2, 0x0, 0x0)

06:51:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
write$P9_RMKDIR(r0, 0x0, 0x0)

[ 1488.217576][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:28 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
shutdown(r0, 0x0)

06:51:28 executing program 4:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640)='/proc/thread-self\x00', 0x0, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
write$P9_RXATTRCREATE(r0, 0x0, 0x0)

06:51:28 executing program 2:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680))

[ 1488.534828][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.614847][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:29 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
write$P9_RREAD(r1, 0x0, 0x0)

06:51:29 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
write$P9_RRENAMEAT(r0, 0x0, 0xfd19)

06:51:29 executing program 5:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$GETNCNT(r0, 0x3, 0x10, 0x0)

06:51:29 executing program 4:
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file1\x00')
r0 = socket$unix(0x1, 0x20000000001, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = fcntl$dupfd(r0, 0x0, r0)
connect(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERROR(r1, &(0x7f00000000c0)={0x13, 0x7, 0x1, {0xa, '/dev\x1f\xa1udl\x00'}}, 0x13)

06:51:29 executing program 2:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x406, 0x0)

06:51:29 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f00000000c0))

06:51:29 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x0)

06:51:29 executing program 1:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

06:51:29 executing program 2:
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @l2, @can, @xdp={0x2c, 0x8}})
r0 = socket(0x10, 0x803, 0x0)
sendmmsg$sock(r0, &(0x7f0000000000), 0x1bf0b3a, 0x0)

06:51:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000200)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
dup3(r1, r2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r3})

06:51:29 executing program 4:
r0 = eventfd2(0x0, 0x0)
write$cgroup_int(r0, &(0x7f00000001c0), 0x12)
write$binfmt_elf32(r0, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)

06:51:29 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
write$P9_RCLUNK(r0, 0x0, 0x0)

[ 1489.257293][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x123442, 0x0)
pwritev(r1, 0x0, 0x0, 0x0, 0x0)

06:51:29 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)

06:51:29 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xdc, 0x0, 0x0, 0x0, 0x2e}}], 0x1, 0x0, 0x0)
fcntl$setflags(r1, 0x2, 0x0)

06:51:29 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
syz_open_pts(r0, 0x0)

06:51:29 executing program 1:
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)

06:51:29 executing program 0:
r0 = eventfd(0x0)
r1 = dup(r0)
write$P9_RFSYNC(r1, 0x0, 0x0)

06:51:29 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000040)={0x2, 'ip6tnl0\x00'})

06:51:29 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

06:51:29 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000280)=[{0x4, 0x8000}, {0x4, 0x5}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x7e30}, {0x4, 0x9}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20020007)
write$binfmt_misc(r1, 0x0, 0x0)

06:51:30 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x400}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71ad}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:30 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r0, 0x409, 0x6)
write$binfmt_aout(r0, &(0x7f0000000240), 0x20)

06:51:30 executing program 4:
get_mempolicy(0x0, &(0x7f0000000400), 0x4, &(0x7f0000ffa000/0x3000)=nil, 0x2)

06:51:30 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0)
dup2(r0, r1)
write$P9_RWRITE(r1, 0x0, 0x0)

[ 1490.295425][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:30 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0)
sync()
creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r2)
fcntl$setlease(r1, 0x406, 0x0)

06:51:30 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)

06:51:30 executing program 4:
r0 = getpid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
wait4(0x0, &(0x7f0000000280), 0x1, &(0x7f00000002c0))
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
write$binfmt_aout(r2, &(0x7f00000003c0)={{0x107, 0x9, 0x0, 0x102, 0x399, 0x346, 0x3ba, 0x4}, "37e736ea9b8b215daade1de6a8be324d95d1bdc175a8e73378330f", [[], [], [], [], [], [], [], []]}, 0x83b)
setrlimit(0x0, &(0x7f0000000d40)={0x7, 0x7})
setxattr$security_capability(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='security.capability\x00', &(0x7f0000000e00)=@v2={0x2000000, [{0x7, 0x6}, {0x1000, 0x3}]}, 0x14, 0x0)
lremovexattr(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)=@known='trusted.overlay.upper\x00')

06:51:30 executing program 5:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0/file0\x00')
lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'selinux\x00'})
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:51:30 executing program 4:
getresgid(&(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)=<r0=>0x0)
setgid(r0)

06:51:30 executing program 3:
creat(&(0x7f0000003900)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000003a80)='./file0\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xffffffffffffffff)

06:51:30 executing program 0:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RWALK(r0, 0x0, 0x0)

06:51:30 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf0040, 0x1ba)

[ 1490.739395][   T28] audit: type=1804 audit(1601275890.748:291): pid=24555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16015 res=1 errno=0
[ 1490.761304][   T28] audit: type=1804 audit(1601275890.748:292): pid=24555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16015 res=1 errno=0
06:51:30 executing program 1:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x2, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'veth1_to_hsr\x00', @ifru_addrs=@generic}})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x20000, 0x0)
r2 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000340)=0x80, 0x80000)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000380)=0x7fff, 0x4)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x1)
signalfd4(r1, &(0x7f0000000440)={[0x6]}, 0x8, 0x80000)
r3 = dup(0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000480)="70a89b1882b17cf52d7de4aa4f9de13fe58a4c966271ed3258062fc5e08d15cf2a8c38bea8d76f0788217200bef5b9817f01a7cf15ab77b62869e22642680d3f2aa4220764ce22c4975507616819225f7a6c71ea2fa2e6f5d48fe18543378b60317bab5faabd7b7b821d7e8c5c0a965116a3fac2", 0x74, r3}, 0x68)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0)
r4 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
fchdir(r4)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x200000, 0x0)
ioctl$TCGETX(r5, 0x5432, &(0x7f0000000640))
r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000700))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0)
accept$unix(r6, 0x0, &(0x7f0000000740))

06:51:30 executing program 3:
mprotect(&(0x7f00006e2000/0x3000)=nil, 0x3000, 0x4000002)

06:51:30 executing program 4:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

06:51:30 executing program 0:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$char_usb(r0, &(0x7f0000000480)="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", 0xfffffdf2)
write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7}, 0x7)

[ 1491.335345][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:31 executing program 0:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7}, 0x7)
dup2(r1, r0)

06:51:31 executing program 5:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
write$P9_RXATTRCREATE(r1, 0x0, 0x0)

06:51:31 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5450)

06:51:31 executing program 2:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, 0x0, 0x0)

06:51:31 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0)

06:51:31 executing program 4:
pipe2(&(0x7f0000000340), 0x0)
socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1)
rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000180)='./file0\x00')
lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:31 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5450)

[ 1491.537371][   T28] audit: type=1804 audit(1601275891.548:293): pid=24586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16380 res=1 errno=0
[ 1491.560166][   T28] audit: type=1804 audit(1601275891.548:294): pid=24591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16380 res=1 errno=0
[ 1491.574687][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:31 executing program 4:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TCSETS2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "07a2665237000c1c00"})

06:51:31 executing program 1:
r0 = creat(&(0x7f00000014c0)='./file0\x00', 0x0)
write$9p(r0, 0x0, 0x11)

06:51:31 executing program 2:
mknod$loop(&(0x7f0000000180)='.//ile0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.//ile0\x00', 0x20000, 0x52)

06:51:31 executing program 1:
creat(&(0x7f0000000740)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@random={'user.', 'trans=xen,'}, &(0x7f00000009c0)='obj_role', 0x8, 0x1)

06:51:31 executing program 3:
r0 = open(&(0x7f0000000000)='.\x00', 0x84a842, 0x0)
fallocate(r0, 0x0, 0x0, 0xc4)

[ 1491.600858][   T28] audit: type=1804 audit(1601275891.608:295): pid=24595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=15952 res=1 errno=0
06:51:31 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000180)="fe531e5bc6305f606bd380c4f5bbac0e98d85fbf626d060557ea4da581d859a35965de45a3469c01ca6442440c5a9891e12cae128654e7eca8c088ffdbb0949eff734805e480d1af7185085608822ce06193574635a8b988f4c9b10fc40e0f1f755aa664a16335e791c3f284e93eea1d879d226029889ba88d80f839c3fc9250b1d0372ea5f72cd53f8bbfba", 0x7f, 0x40891, 0x0, 0x36d)

06:51:31 executing program 5:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_INFO(r0, 0xb, 0x0)

06:51:31 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1}}], 0x1, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x13)

06:51:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x80)
ioctl$sock_SIOCADDDLCI(r1, 0x5452, &(0x7f0000000080)={'veth0_to_team\x00'})

06:51:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r3 = dup3(r0, r2, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x100, 0x0)

06:51:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000040))

06:51:31 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
dup3(r0, r1, 0x0)
sendmsg(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0)

06:51:31 executing program 0:
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9)

06:51:31 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}, {0x4, 0x13}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x7f47}, {0x4, 0x3}, {0x4, 0x3}], 0x3)
semop(r0, &(0x7f0000000100)=[{0x4, 0x9}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:31 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r0, &(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001400)=0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, 0x0)

06:51:31 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)

06:51:31 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x5451, 0x0)
io_setup(0xf6, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x440, 0xa0)
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:31 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x5452, 0x400ffd)

[ 1491.880687][   T28] audit: type=1804 audit(1601275891.888:296): pid=24642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16118 res=1 errno=0
[ 1491.903143][   T28] audit: type=1804 audit(1601275891.918:297): pid=24646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16118 res=1 errno=0
[ 1492.374726][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:32 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4847baa040adaadd, 0x0)
sync()
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
setxattr$security_capability(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:32 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0)

06:51:32 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

06:51:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)

06:51:32 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

06:51:32 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000001600))

06:51:32 executing program 1:
r0 = semget(0xffffffffffffffff, 0x1, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140))

06:51:32 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5451, 0x0)

06:51:32 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0xfffffffffffffc9b}}], 0x1, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
listen(r7, 0x0)
connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = dup2(r7, r6)
r9 = accept(r8, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000340)=0x28)
r10 = dup(r9)
lsetxattr$trusted_overlay_nlink(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x401}, 0x16, 0x2)
setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r11 = semget$private(0x0, 0x2, 0x33)
shmat(r11, &(0x7f0000fff000/0x1000)=nil, 0x1000)

06:51:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$CHAR_RAW_IOMIN(r0, 0x1278, 0x0)

06:51:32 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00')
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000000)={0x2, 'batadv_slave_1\x00'})

06:51:32 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
write$binfmt_elf32(r1, 0x0, 0x0)

06:51:32 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x5451, 0x0)

06:51:32 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
writev(r1, 0x0, 0x0)

06:51:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = timerfd_create(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$P9_RXATTRWALK(r2, 0x0, 0x0)

06:51:32 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$netlink(r1, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0x0)

06:51:32 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, 0x0}}], 0x1, 0x0)

06:51:32 executing program 3:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x9)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syncfs(0xffffffffffffffff)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
connect$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e)

06:51:32 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = inotify_init()
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:32 executing program 3:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r0, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x541b, 0x0)

[ 1493.414729][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:33 executing program 0:
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
sendto(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000180)=@un=@file={0x1, './file0\x00'}, 0x4b)

06:51:33 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)

06:51:33 executing program 4:
sync()
symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00')
rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00')
lsetxattr$trusted_overlay_upper(&(0x7f0000000800)='./file2/file0\x00', 0x0, 0x0, 0x73, 0x0)

06:51:33 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = inotify_init()
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:51:33 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x240, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0)
fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x1117b5e65f2b2de6)

06:51:33 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
writev(r1, 0x0, 0x0)

06:51:33 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5450, 0x0)

06:51:33 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETFSLABEL(r0, 0x5450, 0x0)

06:51:33 executing program 3:
sync()
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TCSETXF(r0, 0x5451, 0x0)
dup(r0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000040)=[0x0, &(0x7f00000001c0)=')\x00', 0x0, &(0x7f00000002c0)='\x00'])

06:51:33 executing program 4:
sync()
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = gettid()
tkill(r1, 0x0)
waitid(0x0, r1, 0x0, 0x1000000, 0x0)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x3)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), &(0x7f0000000080)=0x4)

06:51:33 executing program 0:
sync()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket(0x0, 0x0, 0x2000007)
shutdown(r2, 0x0)
connect(r3, &(0x7f0000000280)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
fchdir(0xffffffffffffffff)
bind(r2, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x14)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040))

[ 1493.599185][   T28] audit: type=1804 audit(1601275893.608:298): pid=24718 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16122 res=1 errno=0
06:51:33 executing program 2:
sync()
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00')
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

06:51:33 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r0, 0x409, 0x6)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RSTAT(r1, &(0x7f0000000240)={0x144, 0x7d, 0x0, {0x0, 0x13d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x13, '(trustedvmnet0@em0(', 0x76, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x76, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0xb, ',^ppp0@bdev'}}, 0x33)

06:51:33 executing program 3:
sync()
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TCSETXF(r0, 0x5451, 0x0)
dup(r0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000040)=[0x0, &(0x7f00000001c0)=')\x00', 0x0, &(0x7f00000002c0)='\x00'])

[ 1493.642609][   T28] audit: type=1804 audit(1601275893.638:299): pid=24721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16122 res=1 errno=0
06:51:33 executing program 4:
sync()
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = gettid()
tkill(r1, 0x0)
waitid(0x0, r1, 0x0, 0x1000000, 0x0)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x3)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), &(0x7f0000000080)=0x4)

06:51:33 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f0000000140)=""/183)

06:51:33 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r3 = dup3(r0, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = semget$private(0x0, 0x1, 0x33)
pipe2$9p(&(0x7f0000002a40)={<r6=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000080)={0x1, 0x1})
dup2(r7, r6)
ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040))
shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
r8 = accept$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e)
pipe2(&(0x7f0000000a40)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r9, &(0x7f0000000040)={0xfffffffffffffcf8}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', r10})

06:51:33 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0)

06:51:33 executing program 2:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
close(r0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RSETATTR(r0, 0x0, 0x0)

06:51:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
write$P9_RSTAT(r0, 0x0, 0x1f)

06:51:33 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x93d051b3943d8f53, 0xc)

06:51:33 executing program 0:
r0 = inotify_init()
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000dc0))

06:51:33 executing program 3:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
write$cgroup_subtree(r1, 0x0, 0x0)

06:51:33 executing program 2:

06:51:33 executing program 4:

06:51:33 executing program 2:

06:51:33 executing program 4:

06:51:33 executing program 0:

[ 1494.455332][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:34 executing program 1:

06:51:34 executing program 3:

06:51:34 executing program 2:

06:51:34 executing program 4:

06:51:34 executing program 0:

06:51:34 executing program 5:

06:51:34 executing program 0:

06:51:34 executing program 4:

06:51:34 executing program 3:

[ 1494.614665][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:34 executing program 2:

06:51:34 executing program 1:

06:51:34 executing program 0:

06:51:34 executing program 3:

06:51:34 executing program 4:

06:51:34 executing program 1:

06:51:34 executing program 2:

06:51:34 executing program 3:

06:51:34 executing program 5:

06:51:34 executing program 2:

06:51:34 executing program 4:

06:51:34 executing program 0:

06:51:34 executing program 3:

06:51:34 executing program 1:

06:51:34 executing program 4:

06:51:34 executing program 1:

06:51:34 executing program 2:

06:51:34 executing program 0:

06:51:34 executing program 3:

06:51:34 executing program 4:

06:51:35 executing program 5:

06:51:35 executing program 0:

06:51:35 executing program 2:

06:51:35 executing program 1:

06:51:35 executing program 3:

06:51:35 executing program 4:

06:51:35 executing program 1:

06:51:35 executing program 0:

06:51:35 executing program 4:

06:51:35 executing program 2:

06:51:35 executing program 3:

06:51:35 executing program 0:

06:51:35 executing program 5:

06:51:35 executing program 1:

06:51:35 executing program 4:

06:51:35 executing program 3:

06:51:35 executing program 2:

06:51:35 executing program 0:

06:51:35 executing program 0:

06:51:35 executing program 1:

06:51:35 executing program 3:

06:51:35 executing program 2:

06:51:35 executing program 4:

06:51:35 executing program 0:

06:51:35 executing program 5:

06:51:35 executing program 0:

06:51:35 executing program 2:

06:51:35 executing program 1:

06:51:35 executing program 3:

06:51:35 executing program 4:

06:51:35 executing program 2:

06:51:35 executing program 1:

06:51:35 executing program 4:

06:51:35 executing program 3:

06:51:35 executing program 0:

06:51:35 executing program 3:

06:51:35 executing program 5:

06:51:35 executing program 2:

06:51:35 executing program 1:

06:51:35 executing program 0:

06:51:35 executing program 4:

06:51:35 executing program 3:

06:51:35 executing program 4:

06:51:35 executing program 2:

[ 1495.498893][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:35 executing program 1:

06:51:35 executing program 0:

06:51:35 executing program 3:

06:51:35 executing program 2:

06:51:35 executing program 5:

06:51:35 executing program 3:

06:51:35 executing program 0:

06:51:35 executing program 4:

06:51:35 executing program 2:

06:51:35 executing program 1:

06:51:35 executing program 1:

06:51:35 executing program 2:

06:51:35 executing program 4:

06:51:35 executing program 0:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self\x00', 0x0, 0x0)
close(r0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)

06:51:35 executing program 3:

06:51:35 executing program 1:

06:51:35 executing program 5:

06:51:35 executing program 4:

06:51:35 executing program 3:

06:51:35 executing program 0:

06:51:35 executing program 2:

06:51:35 executing program 1:

06:51:35 executing program 4:

06:51:35 executing program 1:

06:51:35 executing program 0:

06:51:35 executing program 2:

06:51:35 executing program 4:

06:51:35 executing program 3:

06:51:36 executing program 5:

06:51:36 executing program 1:

06:51:36 executing program 3:

06:51:36 executing program 2:

06:51:36 executing program 4:

06:51:36 executing program 0:

06:51:36 executing program 4:

06:51:36 executing program 1:

06:51:36 executing program 0:

06:51:36 executing program 2:

06:51:36 executing program 4:

06:51:36 executing program 3:

06:51:36 executing program 5:

06:51:36 executing program 2:

06:51:36 executing program 3:

06:51:36 executing program 1:

06:51:36 executing program 0:

06:51:36 executing program 4:

06:51:36 executing program 3:

06:51:36 executing program 4:

06:51:36 executing program 2:

06:51:36 executing program 0:

06:51:36 executing program 1:

06:51:36 executing program 4:

06:51:36 executing program 5:

06:51:36 executing program 3:

06:51:36 executing program 4:

06:51:36 executing program 2:

06:51:36 executing program 1:

06:51:36 executing program 0:

06:51:36 executing program 2:

06:51:36 executing program 3:

06:51:36 executing program 1:

06:51:36 executing program 0:

06:51:36 executing program 4:

06:51:36 executing program 3:

06:51:36 executing program 0:

06:51:36 executing program 2:

06:51:36 executing program 5:

06:51:36 executing program 4:

06:51:36 executing program 1:

06:51:36 executing program 3:

06:51:36 executing program 3:

06:51:36 executing program 4:

06:51:36 executing program 2:

06:51:36 executing program 0:

06:51:36 executing program 1:

06:51:36 executing program 3:

[ 1496.537141][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:36 executing program 4:

06:51:36 executing program 5:

06:51:36 executing program 1:

06:51:36 executing program 3:

06:51:36 executing program 0:

06:51:36 executing program 2:

06:51:36 executing program 4:

06:51:36 executing program 1:

06:51:36 executing program 0:

06:51:36 executing program 3:

06:51:36 executing program 4:

06:51:36 executing program 2:

06:51:36 executing program 4:

06:51:36 executing program 5:

06:51:36 executing program 1:

06:51:36 executing program 2:

06:51:36 executing program 3:

06:51:36 executing program 0:

06:51:36 executing program 4:

06:51:36 executing program 2:

06:51:36 executing program 3:

06:51:36 executing program 0:

06:51:36 executing program 1:

06:51:36 executing program 4:

06:51:36 executing program 3:

06:51:37 executing program 5:

06:51:37 executing program 0:

06:51:37 executing program 1:

06:51:37 executing program 2:

06:51:37 executing program 4:

06:51:37 executing program 3:

06:51:37 executing program 1:

06:51:37 executing program 3:

06:51:37 executing program 4:

06:51:37 executing program 2:

06:51:37 executing program 0:

06:51:37 executing program 3:

06:51:37 executing program 5:

06:51:37 executing program 1:

06:51:37 executing program 4:

06:51:37 executing program 2:

06:51:37 executing program 0:

06:51:37 executing program 3:

06:51:37 executing program 1:

06:51:37 executing program 0:

06:51:37 executing program 4:

06:51:37 executing program 2:

06:51:37 executing program 3:

06:51:37 executing program 0:

06:51:37 executing program 5:

06:51:37 executing program 1:

06:51:37 executing program 3:

06:51:37 executing program 2:

06:51:37 executing program 4:

06:51:37 executing program 0:

06:51:37 executing program 1:

06:51:37 executing program 0:

06:51:37 executing program 3:

06:51:37 executing program 2:

06:51:37 executing program 4:

06:51:37 executing program 0:

06:51:37 executing program 5:

06:51:37 executing program 1:

06:51:37 executing program 0:

06:51:37 executing program 3:

06:51:37 executing program 4:

06:51:37 executing program 2:

06:51:37 executing program 4:

06:51:37 executing program 0:

06:51:37 executing program 2:

06:51:37 executing program 1:

06:51:37 executing program 3:

06:51:37 executing program 4:

[ 1497.579121][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:37 executing program 5:

06:51:37 executing program 0:

06:51:37 executing program 3:

06:51:37 executing program 2:

06:51:37 executing program 1:

06:51:37 executing program 4:

[ 1497.655444][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:37 executing program 2:

06:51:37 executing program 3:

06:51:37 executing program 4:

06:51:37 executing program 0:

06:51:37 executing program 1:

06:51:37 executing program 4:

06:51:37 executing program 5:

06:51:37 executing program 2:

06:51:37 executing program 3:

06:51:37 executing program 0:

06:51:37 executing program 1:

06:51:37 executing program 4:

06:51:37 executing program 2:

06:51:37 executing program 4:

06:51:37 executing program 3:

06:51:37 executing program 1:

06:51:37 executing program 0:

06:51:37 executing program 4:

06:51:38 executing program 5:

06:51:38 executing program 0:

06:51:38 executing program 3:

06:51:38 executing program 2:

06:51:38 executing program 1:

06:51:38 executing program 4:

06:51:38 executing program 0:

06:51:38 executing program 1:

06:51:38 executing program 3:

06:51:38 executing program 2:

06:51:38 executing program 4:

06:51:38 executing program 4:

06:51:38 executing program 5:

06:51:38 executing program 0:

06:51:38 executing program 4:

06:51:38 executing program 3:

06:51:38 executing program 2:

06:51:38 executing program 1:

06:51:38 executing program 0:

06:51:38 executing program 4:

06:51:38 executing program 1:

06:51:38 executing program 0:

06:51:38 executing program 3:

06:51:38 executing program 2:

[ 1498.215386][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:38 executing program 5:

06:51:38 executing program 3:

06:51:38 executing program 4:

06:51:38 executing program 1:

06:51:38 executing program 2:

06:51:38 executing program 0:

06:51:38 executing program 1:

06:51:38 executing program 2:

06:51:38 executing program 3:

06:51:38 executing program 0:

06:51:38 executing program 4:

06:51:38 executing program 1:

06:51:38 executing program 5:

06:51:38 executing program 3:

06:51:38 executing program 2:

06:51:38 executing program 4:

06:51:38 executing program 0:

06:51:38 executing program 1:

06:51:38 executing program 2:

06:51:38 executing program 3:

06:51:38 executing program 4:

06:51:38 executing program 1:

06:51:38 executing program 0:

06:51:38 executing program 2:

06:51:38 executing program 5:

06:51:38 executing program 0:

06:51:38 executing program 4:

06:51:38 executing program 3:

06:51:38 executing program 2:

06:51:38 executing program 1:

[ 1498.614656][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:38 executing program 3:

06:51:38 executing program 2:

06:51:38 executing program 4:

06:51:38 executing program 1:

06:51:38 executing program 0:

06:51:38 executing program 2:

06:51:38 executing program 5:

06:51:38 executing program 1:

06:51:38 executing program 3:

06:51:38 executing program 4:

06:51:38 executing program 2:

06:51:38 executing program 0:

06:51:38 executing program 4:

06:51:38 executing program 0:

06:51:38 executing program 1:

06:51:38 executing program 2:

06:51:38 executing program 3:

06:51:38 executing program 0:

06:51:39 executing program 5:

06:51:39 executing program 4:

06:51:39 executing program 2:

06:51:39 executing program 3:

06:51:39 executing program 1:

06:51:39 executing program 0:

06:51:39 executing program 4:

06:51:39 executing program 3:

06:51:39 executing program 2:

06:51:39 executing program 0:

06:51:39 executing program 1:

06:51:39 executing program 2:

06:51:39 executing program 5:

06:51:39 executing program 4:

06:51:39 executing program 3:

06:51:39 executing program 2:

06:51:39 executing program 1:

06:51:39 executing program 0:

06:51:39 executing program 2:

06:51:39 executing program 4:

06:51:39 executing program 0:

06:51:39 executing program 3:

06:51:39 executing program 1:

06:51:39 executing program 2:

06:51:39 executing program 5:

06:51:39 executing program 4:

06:51:39 executing program 1:

06:51:39 executing program 0:

06:51:39 executing program 3:

06:51:39 executing program 2:

06:51:39 executing program 4:

06:51:39 executing program 1:

06:51:39 executing program 0:

06:51:39 executing program 2:

06:51:39 executing program 3:

06:51:39 executing program 1:

06:51:39 executing program 5:

06:51:39 executing program 4:

06:51:39 executing program 3:

06:51:39 executing program 2:

06:51:39 executing program 0:

06:51:39 executing program 1:

06:51:39 executing program 3:

06:51:39 executing program 4:

06:51:39 executing program 2:

06:51:39 executing program 1:

06:51:39 executing program 0:

06:51:39 executing program 2:

06:51:39 executing program 5:

06:51:39 executing program 3:

06:51:39 executing program 4:

06:51:39 executing program 1:

06:51:39 executing program 2:

06:51:39 executing program 0:

06:51:39 executing program 2:

06:51:39 executing program 1:

06:51:39 executing program 0:

06:51:39 executing program 4:

06:51:39 executing program 3:

[ 1499.656496][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:39 executing program 4:

06:51:39 executing program 5:

06:51:39 executing program 0:

06:51:39 executing program 1:

06:51:39 executing program 3:

06:51:39 executing program 2:

06:51:39 executing program 4:

06:51:39 executing program 0:

06:51:39 executing program 3:

06:51:39 executing program 1:

06:51:39 executing program 2:

06:51:39 executing program 4:

06:51:39 executing program 2:

06:51:40 executing program 1:

06:51:40 executing program 0:

06:51:40 executing program 3:

06:51:40 executing program 5:

06:51:40 executing program 4:

06:51:40 executing program 2:

06:51:40 executing program 2:

06:51:40 executing program 4:

06:51:40 executing program 0:

06:51:40 executing program 1:

06:51:40 executing program 3:

06:51:40 executing program 2:

06:51:40 executing program 5:

06:51:40 executing program 4:

06:51:40 executing program 3:

06:51:40 executing program 0:

06:51:40 executing program 1:

06:51:40 executing program 2:

06:51:40 executing program 4:

06:51:40 executing program 2:

06:51:40 executing program 1:

06:51:40 executing program 0:

06:51:40 executing program 3:

06:51:40 executing program 2:

06:51:40 executing program 5:

06:51:40 executing program 0:

06:51:40 executing program 1:

06:51:40 executing program 4:

06:51:40 executing program 3:

06:51:40 executing program 2:

06:51:40 executing program 0:

06:51:40 executing program 1:

06:51:40 executing program 2:

06:51:40 executing program 4:

06:51:40 executing program 3:

06:51:40 executing program 0:

06:51:40 executing program 5:

06:51:40 executing program 1:

06:51:40 executing program 2:

06:51:40 executing program 3:

06:51:40 executing program 0:

06:51:40 executing program 4:

06:51:40 executing program 2:

06:51:40 executing program 3:

06:51:40 executing program 4:

06:51:40 executing program 1:

06:51:40 executing program 0:

06:51:40 executing program 2:

06:51:40 executing program 5:

06:51:40 executing program 3:

06:51:40 executing program 1:

06:51:40 executing program 4:

06:51:40 executing program 0:

06:51:40 executing program 2:

06:51:40 executing program 2:

06:51:40 executing program 1:

06:51:40 executing program 3:

06:51:40 executing program 0:

06:51:40 executing program 4:

[ 1500.696662][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1500.704758][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:40 executing program 2:

06:51:40 executing program 5:

06:51:40 executing program 1:

06:51:40 executing program 3:

06:51:40 executing program 4:

06:51:40 executing program 0:

06:51:40 executing program 2:

06:51:40 executing program 2:

06:51:40 executing program 0:

06:51:40 executing program 3:

06:51:40 executing program 1:

06:51:40 executing program 4:

06:51:40 executing program 2:

06:51:41 executing program 5:

06:51:41 executing program 0:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 2:

06:51:41 executing program 4:

06:51:41 executing program 0:

06:51:41 executing program 1:

06:51:41 executing program 2:

06:51:41 executing program 4:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 5:

06:51:41 executing program 0:

06:51:41 executing program 4:

06:51:41 executing program 3:

06:51:41 executing program 2:

06:51:41 executing program 1:

06:51:41 executing program 3:

06:51:41 executing program 2:

06:51:41 executing program 0:

06:51:41 executing program 1:

06:51:41 executing program 4:

06:51:41 executing program 3:

06:51:41 executing program 5:

06:51:41 executing program 4:

06:51:41 executing program 2:

06:51:41 executing program 0:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 3:

06:51:41 executing program 4:

06:51:41 executing program 0:

06:51:41 executing program 1:

06:51:41 executing program 2:

06:51:41 executing program 3:

06:51:41 executing program 5:

06:51:41 executing program 0:

06:51:41 executing program 4:

06:51:41 executing program 2:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 4:

06:51:41 executing program 1:

06:51:41 executing program 0:

06:51:41 executing program 2:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 5:

06:51:41 executing program 0:

06:51:41 executing program 3:

06:51:41 executing program 4:

06:51:41 executing program 1:

06:51:41 executing program 2:

06:51:41 executing program 2:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 0:

06:51:41 executing program 4:

06:51:41 executing program 1:

[ 1501.734648][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:41 executing program 5:

06:51:41 executing program 4:

06:51:41 executing program 3:

06:51:41 executing program 1:

06:51:41 executing program 2:

06:51:41 executing program 0:

06:51:41 executing program 1:

06:51:41 executing program 4:

06:51:41 executing program 2:

06:51:41 executing program 3:

06:51:41 executing program 0:

06:51:41 executing program 2:

06:51:42 executing program 5:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 0:

06:51:42 executing program 4:

06:51:42 executing program 2:

06:51:42 executing program 2:

06:51:42 executing program 4:

06:51:42 executing program 0:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 4:

06:51:42 executing program 5:

06:51:42 executing program 2:

06:51:42 executing program 3:

06:51:42 executing program 0:

06:51:42 executing program 1:

06:51:42 executing program 4:

06:51:42 executing program 1:

06:51:42 executing program 2:

06:51:42 executing program 3:

06:51:42 executing program 0:

06:51:42 executing program 4:

06:51:42 executing program 0:

06:51:42 executing program 5:

06:51:42 executing program 3:

06:51:42 executing program 4:

06:51:42 executing program 1:

06:51:42 executing program 2:

06:51:42 executing program 0:

06:51:42 executing program 2:

06:51:42 executing program 4:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 0:

06:51:42 executing program 4:

06:51:42 executing program 5:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 0:

06:51:42 executing program 2:

06:51:42 executing program 4:

06:51:42 executing program 2:

06:51:42 executing program 4:

06:51:42 executing program 0:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 4:

06:51:42 executing program 5:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 0:

06:51:42 executing program 2:

06:51:42 executing program 4:

06:51:42 executing program 4:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 2:

06:51:42 executing program 0:

06:51:42 executing program 4:

06:51:42 executing program 5:

06:51:42 executing program 0:

06:51:42 executing program 3:

06:51:42 executing program 4:

06:51:42 executing program 1:

06:51:42 executing program 2:

[ 1502.774722][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:42 executing program 0:

06:51:42 executing program 4:

06:51:42 executing program 1:

06:51:42 executing program 3:

06:51:42 executing program 2:

06:51:42 executing program 3:

06:51:43 executing program 5:

06:51:43 executing program 0:

06:51:43 executing program 4:

06:51:43 executing program 2:

06:51:43 executing program 1:

06:51:43 executing program 3:

06:51:43 executing program 2:

06:51:43 executing program 1:

06:51:43 executing program 3:

06:51:43 executing program 0:

06:51:43 executing program 2:

06:51:43 executing program 4:

06:51:43 executing program 5:

06:51:43 executing program 3:

06:51:43 executing program 1:

06:51:43 executing program 4:

06:51:43 executing program 2:

06:51:43 executing program 0:

06:51:43 executing program 4:

06:51:43 executing program 0:

06:51:43 executing program 2:

06:51:43 executing program 1:

06:51:43 executing program 3:

06:51:43 executing program 4:

06:51:43 executing program 5:

06:51:43 executing program 0:

06:51:43 executing program 2:

06:51:43 executing program 3:

06:51:43 executing program 1:

06:51:43 executing program 4:

06:51:43 executing program 1:

06:51:43 executing program 0:

06:51:43 executing program 3:

06:51:43 executing program 4:

06:51:43 executing program 2:

06:51:43 executing program 1:

06:51:43 executing program 5:

06:51:43 executing program 3:

06:51:43 executing program 0:

06:51:43 executing program 2:

06:51:43 executing program 1:

06:51:43 executing program 4:

06:51:43 executing program 0:

06:51:43 executing program 1:

06:51:43 executing program 3:

06:51:43 executing program 2:

06:51:43 executing program 4:

06:51:43 executing program 0:

06:51:43 executing program 5:

06:51:43 executing program 3:

06:51:43 executing program 2:

06:51:43 executing program 1:

06:51:43 executing program 0:

06:51:43 executing program 4:

06:51:43 executing program 3:

06:51:43 executing program 2:

06:51:43 executing program 0:

06:51:43 executing program 1:

06:51:43 executing program 4:

06:51:43 executing program 3:

[ 1503.741239][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1503.814654][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:44 executing program 5:

06:51:44 executing program 4:

06:51:44 executing program 0:

06:51:44 executing program 1:

06:51:44 executing program 2:

06:51:44 executing program 3:

06:51:44 executing program 1:

06:51:44 executing program 3:

06:51:44 executing program 0:

06:51:44 executing program 4:

06:51:44 executing program 2:

06:51:44 executing program 2:

06:51:44 executing program 5:

06:51:44 executing program 3:

06:51:44 executing program 4:

06:51:44 executing program 0:

06:51:44 executing program 1:

06:51:44 executing program 2:

06:51:44 executing program 3:

06:51:44 executing program 4:

06:51:44 executing program 1:

06:51:44 executing program 0:

06:51:44 executing program 2:

06:51:44 executing program 3:

06:51:44 executing program 5:

06:51:44 executing program 4:

06:51:44 executing program 0:

06:51:44 executing program 1:

06:51:44 executing program 2:

06:51:44 executing program 3:

06:51:44 executing program 0:

06:51:44 executing program 1:

06:51:44 executing program 4:

06:51:44 executing program 2:

06:51:44 executing program 1:

06:51:44 executing program 3:

06:51:44 executing program 5:

06:51:44 executing program 0:

06:51:44 executing program 2:

06:51:44 executing program 4:

06:51:44 executing program 1:

06:51:44 executing program 3:

[ 1504.854520][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:44 executing program 0:

06:51:44 executing program 4:

06:51:44 executing program 1:

06:51:45 executing program 3:

06:51:45 executing program 2:

06:51:45 executing program 4:

06:51:45 executing program 5:

06:51:45 executing program 0:

06:51:45 executing program 4:

06:51:45 executing program 2:

06:51:45 executing program 3:

06:51:45 executing program 1:

06:51:45 executing program 3:

06:51:45 executing program 0:

06:51:45 executing program 2:

06:51:45 executing program 4:

06:51:45 executing program 4:

06:51:45 executing program 0:

06:51:45 executing program 2:

06:51:45 executing program 1:

06:51:45 executing program 5:

06:51:45 executing program 3:

06:51:45 executing program 0:

06:51:45 executing program 4:

06:51:45 executing program 4:

06:51:45 executing program 2:

06:51:45 executing program 3:

06:51:45 executing program 1:

06:51:45 executing program 0:

06:51:45 executing program 0:

06:51:45 executing program 5:

06:51:45 executing program 4:

06:51:45 executing program 3:

06:51:45 executing program 2:

06:51:45 executing program 1:

06:51:45 executing program 0:

06:51:45 executing program 0:

06:51:45 executing program 1:

06:51:45 executing program 4:

06:51:45 executing program 3:

06:51:45 executing program 2:

06:51:45 executing program 0:

06:51:45 executing program 5:

06:51:45 executing program 4:

06:51:45 executing program 1:

06:51:45 executing program 3:

06:51:45 executing program 2:

06:51:45 executing program 0:

06:51:45 executing program 1:

06:51:45 executing program 2:

06:51:45 executing program 3:

06:51:45 executing program 4:

06:51:45 executing program 0:

06:51:45 executing program 1:

06:51:45 executing program 5:

06:51:45 executing program 4:

06:51:45 executing program 0:

06:51:45 executing program 2:

06:51:45 executing program 1:

06:51:45 executing program 3:

06:51:45 executing program 4:

06:51:45 executing program 0:

06:51:45 executing program 3:

06:51:45 executing program 1:

06:51:45 executing program 2:

06:51:45 executing program 0:

06:51:45 executing program 5:

06:51:45 executing program 4:

06:51:45 executing program 0:

06:51:45 executing program 3:

06:51:45 executing program 1:

06:51:45 executing program 2:

06:51:45 executing program 1:

06:51:45 executing program 0:

06:51:45 executing program 4:

06:51:45 executing program 3:

[ 1505.900357][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:45 executing program 2:

06:51:46 executing program 4:

06:51:46 executing program 5:

06:51:46 executing program 0:

06:51:46 executing program 1:

06:51:46 executing program 2:

06:51:46 executing program 3:

06:51:46 executing program 4:

06:51:46 executing program 2:

06:51:46 executing program 4:

06:51:46 executing program 3:

06:51:46 executing program 0:

06:51:46 executing program 1:

06:51:46 executing program 3:

06:51:46 executing program 5:

06:51:46 executing program 0:

06:51:46 executing program 1:

06:51:46 executing program 3:

06:51:46 executing program 2:

06:51:46 executing program 4:

06:51:46 executing program 1:

06:51:46 executing program 0:

06:51:46 executing program 3:

06:51:46 executing program 4:

06:51:46 executing program 2:

06:51:46 executing program 1:

06:51:46 executing program 5:

06:51:46 executing program 0:

06:51:46 executing program 3:

06:51:46 executing program 4:

06:51:46 executing program 2:

06:51:46 executing program 1:

06:51:46 executing program 2:

06:51:46 executing program 1:

06:51:46 executing program 4:

06:51:46 executing program 3:

06:51:46 executing program 0:

06:51:46 executing program 2:

06:51:46 executing program 5:

06:51:46 executing program 4:

06:51:46 executing program 3:

06:51:46 executing program 1:

06:51:46 executing program 0:

06:51:46 executing program 2:

06:51:46 executing program 1:

06:51:46 executing program 3:

06:51:46 executing program 4:

06:51:46 executing program 2:

06:51:46 executing program 0:

06:51:46 executing program 1:

06:51:46 executing program 5:

06:51:46 executing program 1:

06:51:46 executing program 4:

06:51:46 executing program 0:

06:51:46 executing program 3:

06:51:46 executing program 2:

06:51:46 executing program 0:

06:51:46 executing program 2:

06:51:46 executing program 3:

06:51:46 executing program 1:

06:51:46 executing program 4:

06:51:46 executing program 0:

[ 1506.779583][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:46 executing program 5:

06:51:46 executing program 2:

06:51:46 executing program 0:

06:51:46 executing program 3:

06:51:46 executing program 1:

06:51:46 executing program 4:

06:51:46 executing program 3:

06:51:46 executing program 0:

06:51:46 executing program 4:

06:51:46 executing program 2:

06:51:46 executing program 1:

06:51:47 executing program 3:

[ 1506.937143][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:47 executing program 5:

06:51:47 executing program 4:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 2:

06:51:47 executing program 3:

06:51:47 executing program 3:

06:51:47 executing program 2:

06:51:47 executing program 4:

06:51:47 executing program 1:

06:51:47 executing program 0:

06:51:47 executing program 4:

06:51:47 executing program 5:

06:51:47 executing program 3:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 4:

06:51:47 executing program 2:

06:51:47 executing program 3:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 2:

06:51:47 executing program 0:

06:51:47 executing program 4:

06:51:47 executing program 5:

06:51:47 executing program 3:

06:51:47 executing program 2:

06:51:47 executing program 1:

06:51:47 executing program 4:

06:51:47 executing program 0:

06:51:47 executing program 3:

06:51:47 executing program 4:

06:51:47 executing program 2:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 3:

06:51:47 executing program 5:

06:51:47 executing program 0:

06:51:47 executing program 4:

06:51:47 executing program 2:

06:51:47 executing program 1:

06:51:47 executing program 3:

06:51:47 executing program 4:

06:51:47 executing program 3:

06:51:47 executing program 2:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 4:

06:51:47 executing program 5:

06:51:47 executing program 3:

06:51:47 executing program 2:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 4:

06:51:47 executing program 1:

06:51:47 executing program 2:

06:51:47 executing program 0:

06:51:47 executing program 3:

06:51:47 executing program 4:

06:51:47 executing program 2:

06:51:47 executing program 5:

06:51:47 executing program 0:

06:51:47 executing program 4:

06:51:47 executing program 1:

06:51:47 executing program 3:

06:51:47 executing program 2:

[ 1507.815634][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:47 executing program 3:

06:51:47 executing program 4:

06:51:47 executing program 2:

06:51:47 executing program 0:

06:51:47 executing program 1:

06:51:47 executing program 3:

06:51:48 executing program 5:

06:51:48 executing program 4:

06:51:48 executing program 0:

06:51:48 executing program 2:

06:51:48 executing program 3:

06:51:48 executing program 1:

[ 1507.974638][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:48 executing program 2:

06:51:48 executing program 1:

06:51:48 executing program 0:

06:51:48 executing program 3:

06:51:48 executing program 4:

06:51:48 executing program 3:

06:51:48 executing program 5:

06:51:48 executing program 4:

06:51:48 executing program 1:

06:51:48 executing program 3:

06:51:48 executing program 0:

06:51:48 executing program 2:

06:51:48 executing program 2:

06:51:48 executing program 4:

06:51:48 executing program 3:

06:51:48 executing program 1:

06:51:48 executing program 0:

06:51:48 executing program 2:

06:51:48 executing program 5:

06:51:48 executing program 4:

06:51:48 executing program 3:

06:51:48 executing program 1:

06:51:48 executing program 0:

06:51:48 executing program 2:

06:51:48 executing program 0:

06:51:48 executing program 4:

06:51:48 executing program 1:

06:51:48 executing program 3:

06:51:48 executing program 2:

06:51:48 executing program 3:

06:51:48 executing program 5:

06:51:48 executing program 4:

06:51:48 executing program 0:

06:51:48 executing program 2:

06:51:48 executing program 1:

06:51:48 executing program 3:

06:51:48 executing program 0:

06:51:48 executing program 1:

06:51:48 executing program 4:

06:51:48 executing program 2:

06:51:48 executing program 3:

06:51:48 executing program 0:

06:51:48 executing program 5:

06:51:48 executing program 1:

06:51:48 executing program 3:

06:51:48 executing program 2:

06:51:48 executing program 4:

06:51:48 executing program 0:

06:51:48 executing program 4:

06:51:48 executing program 3:

06:51:48 executing program 2:

06:51:48 executing program 0:

06:51:48 executing program 1:

06:51:48 executing program 4:

06:51:48 executing program 5:

06:51:48 executing program 2:

06:51:48 executing program 3:

06:51:48 executing program 1:

06:51:48 executing program 0:

06:51:48 executing program 4:

06:51:48 executing program 3:

06:51:48 executing program 2:

06:51:48 executing program 0:

06:51:48 executing program 4:

06:51:48 executing program 1:

06:51:48 executing program 2:

06:51:49 executing program 5:

06:51:49 executing program 3:

06:51:49 executing program 4:

06:51:49 executing program 0:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 3:

[ 1509.020171][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:49 executing program 4:

06:51:49 executing program 0:

06:51:49 executing program 1:

06:51:49 executing program 2:

06:51:49 executing program 4:

06:51:49 executing program 5:

06:51:49 executing program 2:

06:51:49 executing program 0:

06:51:49 executing program 1:

06:51:49 executing program 3:

06:51:49 executing program 4:

06:51:49 executing program 4:

06:51:49 executing program 1:

06:51:49 executing program 3:

06:51:49 executing program 0:

06:51:49 executing program 1:

06:51:49 executing program 2:

06:51:49 executing program 5:

06:51:49 executing program 4:

06:51:49 executing program 3:

06:51:49 executing program 0:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 4:

06:51:49 executing program 0:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 3:

06:51:49 executing program 4:

06:51:49 executing program 5:

06:51:49 executing program 3:

06:51:49 executing program 0:

06:51:49 executing program 4:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 4:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 0:

06:51:49 executing program 4:

06:51:49 executing program 3:

06:51:49 executing program 5:

06:51:49 executing program 3:

06:51:49 executing program 0:

06:51:49 executing program 4:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 0:

06:51:49 executing program 2:

06:51:49 executing program 1:

06:51:49 executing program 4:

06:51:49 executing program 3:

06:51:49 executing program 0:

06:51:49 executing program 5:

06:51:49 executing program 2:

06:51:49 executing program 3:

06:51:49 executing program 1:

06:51:49 executing program 4:

06:51:49 executing program 0:

[ 1509.820934][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:49 executing program 1:

06:51:49 executing program 3:

06:51:49 executing program 2:

06:51:49 executing program 0:

06:51:49 executing program 4:

06:51:49 executing program 3:

06:51:50 executing program 5:

06:51:50 executing program 0:

06:51:50 executing program 1:

06:51:50 executing program 3:

06:51:50 executing program 4:

06:51:50 executing program 2:

06:51:50 executing program 3:

06:51:50 executing program 4:

06:51:50 executing program 1:

06:51:50 executing program 0:

06:51:50 executing program 2:

[ 1510.058005][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:50 executing program 3:

06:51:50 executing program 5:

06:51:50 executing program 4:

06:51:50 executing program 3:

06:51:50 executing program 0:

06:51:50 executing program 2:

06:51:50 executing program 1:

06:51:50 executing program 2:

06:51:50 executing program 4:

06:51:50 executing program 0:

06:51:50 executing program 1:

06:51:50 executing program 3:

06:51:50 executing program 4:

06:51:50 executing program 5:

06:51:50 executing program 2:

06:51:50 executing program 0:

06:51:50 executing program 1:

06:51:50 executing program 3:

06:51:50 executing program 4:

06:51:50 executing program 0:

06:51:50 executing program 1:

06:51:50 executing program 4:

06:51:50 executing program 2:

06:51:50 executing program 3:

06:51:50 executing program 2:

06:51:50 executing program 5:

06:51:50 executing program 3:

06:51:50 executing program 1:

06:51:50 executing program 4:

06:51:50 executing program 0:

06:51:50 executing program 2:

06:51:50 executing program 1:

06:51:50 executing program 2:

06:51:50 executing program 0:

06:51:50 executing program 3:

06:51:50 executing program 4:

06:51:50 executing program 3:

06:51:50 executing program 4:

06:51:50 executing program 1:

06:51:50 executing program 5:

06:51:50 executing program 0:

06:51:50 executing program 3:

06:51:50 executing program 2:

06:51:50 executing program 3:

06:51:50 executing program 0:

06:51:50 executing program 4:

06:51:50 executing program 2:

06:51:50 executing program 1:

06:51:50 executing program 4:

06:51:50 executing program 5:

06:51:50 executing program 2:

06:51:50 executing program 1:

06:51:50 executing program 3:

06:51:50 executing program 0:

06:51:50 executing program 4:

06:51:50 executing program 2:

06:51:50 executing program 3:

06:51:50 executing program 1:

06:51:50 executing program 4:

06:51:50 executing program 0:

06:51:50 executing program 3:

06:51:51 executing program 5:

06:51:51 executing program 2:

06:51:51 executing program 0:

06:51:51 executing program 4:

06:51:51 executing program 1:

06:51:51 executing program 3:

06:51:51 executing program 4:

06:51:51 executing program 0:

06:51:51 executing program 3:

06:51:51 executing program 2:

06:51:51 executing program 1:

06:51:51 executing program 4:

[ 1511.095189][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:51 executing program 5:

06:51:51 executing program 0:

06:51:51 executing program 1:

06:51:51 executing program 3:

06:51:51 executing program 2:

06:51:51 executing program 4:

06:51:51 executing program 1:

06:51:51 executing program 0:

06:51:51 executing program 3:

06:51:51 executing program 4:

06:51:51 executing program 2:

06:51:51 executing program 1:

06:51:51 executing program 5:

06:51:51 executing program 3:

06:51:51 executing program 0:

06:51:51 executing program 4:

06:51:51 executing program 2:

06:51:51 executing program 1:

06:51:51 executing program 0:

06:51:51 executing program 3:

06:51:51 executing program 1:

06:51:51 executing program 2:

06:51:51 executing program 4:

06:51:51 executing program 3:

06:51:51 executing program 5:

06:51:51 executing program 2:

06:51:51 executing program 0:

06:51:51 executing program 1:

06:51:51 executing program 4:

06:51:51 executing program 3:

06:51:51 executing program 1:

06:51:51 executing program 3:

06:51:51 executing program 2:

06:51:51 executing program 0:

06:51:51 executing program 4:

06:51:51 executing program 1:

06:51:51 executing program 5:

06:51:51 executing program 0:

06:51:51 executing program 2:

06:51:51 executing program 3:

06:51:51 executing program 1:

06:51:51 executing program 4:

06:51:51 executing program 2:

06:51:51 executing program 4:

06:51:51 executing program 0:

06:51:51 executing program 1:

06:51:51 executing program 3:

06:51:51 executing program 1:

06:51:51 executing program 5:

06:51:51 executing program 4:

06:51:51 executing program 2:

06:51:51 executing program 3:

06:51:51 executing program 0:

06:51:51 executing program 1:

06:51:51 executing program 0:

06:51:51 executing program 2:

06:51:51 executing program 3:

06:51:51 executing program 4:

06:51:51 executing program 0:

06:51:51 executing program 1:

06:51:52 executing program 5:

06:51:52 executing program 3:

06:51:52 executing program 2:

06:51:52 executing program 1:

06:51:52 executing program 4:

06:51:52 executing program 0:

06:51:52 executing program 4:

06:51:52 executing program 3:

06:51:52 executing program 0:

06:51:52 executing program 2:

06:51:52 executing program 1:

06:51:52 executing program 4:

06:51:52 executing program 5:

06:51:52 executing program 3:

06:51:52 executing program 2:

06:51:52 executing program 4:

06:51:52 executing program 0:

06:51:52 executing program 1:

[ 1512.136900][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:52 executing program 3:

06:51:52 executing program 4:

06:51:52 executing program 1:

06:51:52 executing program 2:

06:51:52 executing program 0:

06:51:52 executing program 4:

06:51:52 executing program 5:

06:51:52 executing program 3:

06:51:52 executing program 1:

06:51:52 executing program 0:

06:51:52 executing program 2:

06:51:52 executing program 4:

06:51:52 executing program 3:

06:51:52 executing program 2:

06:51:52 executing program 1:

06:51:52 executing program 0:

06:51:52 executing program 4:

06:51:52 executing program 3:

06:51:52 executing program 5:

06:51:52 executing program 2:

06:51:52 executing program 0:

06:51:52 executing program 1:

06:51:52 executing program 3:

06:51:52 executing program 4:

06:51:52 executing program 2:

06:51:52 executing program 0:

06:51:52 executing program 3:

06:51:52 executing program 1:

06:51:52 executing program 2:

06:51:52 executing program 4:

06:51:52 executing program 5:

06:51:52 executing program 3:

06:51:52 executing program 4:

06:51:52 executing program 0:

06:51:52 executing program 1:

06:51:52 executing program 2:

06:51:52 executing program 0:

06:51:52 executing program 2:

06:51:52 executing program 4:

06:51:52 executing program 3:

06:51:52 executing program 1:

06:51:52 executing program 2:

06:51:52 executing program 5:

06:51:52 executing program 3:

06:51:52 executing program 4:

06:51:52 executing program 0:

06:51:52 executing program 1:

06:51:52 executing program 2:

06:51:52 executing program 1:

06:51:52 executing program 3:

06:51:52 executing program 0:

06:51:52 executing program 2:

06:51:52 executing program 4:

[ 1512.865772][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:52 executing program 1:

06:51:53 executing program 5:

06:51:53 executing program 3:

06:51:53 executing program 2:

06:51:53 executing program 0:

06:51:53 executing program 4:

06:51:53 executing program 1:

06:51:53 executing program 4:

06:51:53 executing program 2:

06:51:53 executing program 3:

06:51:53 executing program 0:

06:51:53 executing program 0:

06:51:53 executing program 4:

06:51:53 executing program 5:

06:51:53 executing program 1:

06:51:53 executing program 2:

06:51:53 executing program 3:

06:51:53 executing program 4:

06:51:53 executing program 0:

06:51:53 executing program 2:

06:51:53 executing program 1:

06:51:53 executing program 4:

06:51:53 executing program 0:

[ 1513.175490][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:53 executing program 3:

06:51:53 executing program 4:

06:51:53 executing program 5:

06:51:53 executing program 1:

06:51:53 executing program 0:

06:51:53 executing program 2:

06:51:53 executing program 3:

06:51:53 executing program 4:

06:51:53 executing program 3:

06:51:53 executing program 1:

06:51:53 executing program 0:

06:51:53 executing program 2:

06:51:53 executing program 4:

06:51:53 executing program 3:

06:51:53 executing program 5:

06:51:53 executing program 1:

06:51:53 executing program 2:

06:51:53 executing program 4:

06:51:53 executing program 3:

06:51:53 executing program 0:

06:51:53 executing program 4:

06:51:53 executing program 2:

06:51:53 executing program 1:

06:51:53 executing program 0:

06:51:53 executing program 3:

06:51:53 executing program 2:

06:51:53 executing program 5:

06:51:53 executing program 3:

06:51:53 executing program 2:

06:51:53 executing program 1:

06:51:53 executing program 4:

06:51:53 executing program 0:

06:51:53 executing program 2:

06:51:53 executing program 0:

06:51:53 executing program 1:

06:51:53 executing program 3:

06:51:53 executing program 4:

06:51:53 executing program 1:

06:51:53 executing program 2:

06:51:53 executing program 0:

06:51:53 executing program 5:

06:51:53 executing program 4:

06:51:53 executing program 3:

06:51:53 executing program 1:

06:51:53 executing program 2:

06:51:53 executing program 0:

06:51:53 executing program 1:

06:51:53 executing program 4:

06:51:53 executing program 3:

06:51:53 executing program 2:

06:51:54 executing program 5:

06:51:54 executing program 0:

06:51:54 executing program 3:

06:51:54 executing program 4:

06:51:54 executing program 1:

06:51:54 executing program 2:

06:51:54 executing program 0:

06:51:54 executing program 3:

06:51:54 executing program 4:

06:51:54 executing program 1:

06:51:54 executing program 2:

06:51:54 executing program 4:

06:51:54 executing program 5:

06:51:54 executing program 4:

06:51:54 executing program 1:

06:51:54 executing program 3:

06:51:54 executing program 0:

06:51:54 executing program 2:

06:51:54 executing program 3:

06:51:54 executing program 4:

06:51:54 executing program 2:

06:51:54 executing program 1:

06:51:54 executing program 0:

06:51:54 executing program 4:

[ 1514.220531][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1514.229889][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1514.239096][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1514.247894][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:54 executing program 5:

06:51:54 executing program 2:

06:51:54 executing program 3:

06:51:54 executing program 1:

06:51:54 executing program 4:

06:51:54 executing program 0:

06:51:54 executing program 0:

06:51:54 executing program 4:

06:51:54 executing program 2:

06:51:54 executing program 1:

06:51:54 executing program 3:

06:51:54 executing program 0:

06:51:54 executing program 5:

06:51:54 executing program 0:

06:51:54 executing program 4:

06:51:54 executing program 1:

06:51:54 executing program 2:

06:51:54 executing program 3:

06:51:54 executing program 1:

06:51:54 executing program 0:

06:51:54 executing program 4:

06:51:54 executing program 2:

06:51:54 executing program 3:

06:51:54 executing program 1:

06:51:54 executing program 3:

06:51:54 executing program 5:

06:51:54 executing program 4:

06:51:54 executing program 0:

06:51:54 executing program 1:

06:51:54 executing program 2:

06:51:54 executing program 4:

06:51:54 executing program 0:

06:51:54 executing program 3:

06:51:54 executing program 2:

06:51:54 executing program 1:

06:51:54 executing program 4:

06:51:54 executing program 0:

06:51:54 executing program 5:

06:51:54 executing program 3:

06:51:54 executing program 2:

06:51:54 executing program 4:

06:51:54 executing program 1:

06:51:54 executing program 0:

06:51:54 executing program 0:

06:51:54 executing program 2:

06:51:54 executing program 3:

06:51:54 executing program 1:

06:51:54 executing program 4:

06:51:54 executing program 2:

06:51:55 executing program 5:

06:51:55 executing program 1:

06:51:55 executing program 0:

06:51:55 executing program 4:

06:51:55 executing program 2:

06:51:55 executing program 3:

06:51:55 executing program 3:

06:51:55 executing program 0:

06:51:55 executing program 2:

06:51:55 executing program 3:

06:51:55 executing program 4:

06:51:55 executing program 1:

06:51:55 executing program 5:

06:51:55 executing program 4:

06:51:55 executing program 2:

06:51:55 executing program 3:

06:51:55 executing program 0:

06:51:55 executing program 1:

06:51:55 executing program 1:

06:51:55 executing program 4:

06:51:55 executing program 2:

06:51:55 executing program 0:

06:51:55 executing program 3:

06:51:55 executing program 1:

06:51:55 executing program 5:

06:51:55 executing program 4:

06:51:55 executing program 0:

06:51:55 executing program 2:

06:51:55 executing program 3:

06:51:55 executing program 1:

[ 1515.337432][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:55 executing program 1:

06:51:55 executing program 2:

06:51:55 executing program 0:

06:51:55 executing program 3:

06:51:55 executing program 1:

06:51:55 executing program 4:

06:51:55 executing program 5:

06:51:55 executing program 2:

06:51:55 executing program 3:

06:51:55 executing program 0:

06:51:55 executing program 4:

06:51:55 executing program 1:

06:51:55 executing program 4:

06:51:55 executing program 2:

06:51:55 executing program 1:

06:51:55 executing program 3:

06:51:55 executing program 0:

06:51:55 executing program 4:

06:51:55 executing program 5:

06:51:55 executing program 2:

06:51:55 executing program 1:

06:51:55 executing program 0:

06:51:55 executing program 3:

06:51:55 executing program 4:

06:51:55 executing program 2:

06:51:55 executing program 1:

06:51:55 executing program 3:

06:51:55 executing program 0:

06:51:55 executing program 4:

06:51:55 executing program 1:

06:51:55 executing program 5:

06:51:55 executing program 2:

06:51:55 executing program 3:

06:51:55 executing program 4:

06:51:55 executing program 0:

06:51:55 executing program 1:

06:51:55 executing program 1:

06:51:55 executing program 3:

06:51:55 executing program 2:

06:51:55 executing program 4:

06:51:55 executing program 0:

[ 1515.895470][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:56 executing program 1:

06:51:56 executing program 5:

06:51:56 executing program 2:

06:51:56 executing program 3:

06:51:56 executing program 0:

06:51:56 executing program 4:

06:51:56 executing program 1:

06:51:56 executing program 3:

06:51:56 executing program 1:

06:51:56 executing program 4:

06:51:56 executing program 2:

06:51:56 executing program 0:

06:51:56 executing program 2:

06:51:56 executing program 5:

06:51:56 executing program 1:

06:51:56 executing program 3:

06:51:56 executing program 4:

06:51:56 executing program 0:

06:51:56 executing program 2:

06:51:56 executing program 1:

06:51:56 executing program 4:

06:51:56 executing program 3:

06:51:56 executing program 0:

06:51:56 executing program 2:

06:51:56 executing program 3:

06:51:56 executing program 5:

06:51:56 executing program 0:

06:51:56 executing program 2:

06:51:56 executing program 4:

06:51:56 executing program 3:

06:51:56 executing program 1:

06:51:56 executing program 1:

06:51:56 executing program 4:

06:51:56 executing program 3:

06:51:56 executing program 2:

[ 1516.375142][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:56 executing program 0:

06:51:56 executing program 4:

06:51:56 executing program 5:

06:51:56 executing program 1:

06:51:56 executing program 0:

06:51:56 executing program 3:

06:51:56 executing program 4:

06:51:56 executing program 2:

06:51:56 executing program 3:

06:51:56 executing program 1:

06:51:56 executing program 2:

06:51:56 executing program 4:

06:51:56 executing program 0:

06:51:56 executing program 3:

06:51:56 executing program 5:

06:51:56 executing program 1:

06:51:56 executing program 2:

06:51:56 executing program 0:

06:51:56 executing program 4:

06:51:56 executing program 3:

06:51:56 executing program 1:

06:51:56 executing program 2:

06:51:56 executing program 4:

06:51:56 executing program 3:

06:51:56 executing program 0:

06:51:56 executing program 1:

06:51:56 executing program 5:

06:51:56 executing program 2:

06:51:56 executing program 4:

06:51:56 executing program 3:

06:51:56 executing program 0:

06:51:56 executing program 1:

06:51:56 executing program 2:

06:51:56 executing program 3:

06:51:56 executing program 0:

06:51:56 executing program 4:

06:51:56 executing program 1:

06:51:56 executing program 2:

06:51:57 executing program 5:

06:51:57 executing program 0:

06:51:57 executing program 3:

06:51:57 executing program 4:

06:51:57 executing program 1:

06:51:57 executing program 2:

06:51:57 executing program 4:

06:51:57 executing program 0:

06:51:57 executing program 1:

06:51:57 executing program 3:

06:51:57 executing program 2:

06:51:57 executing program 0:

06:51:57 executing program 5:

06:51:57 executing program 1:

06:51:57 executing program 4:

06:51:57 executing program 2:

06:51:57 executing program 3:

06:51:57 executing program 0:

06:51:57 executing program 4:

06:51:57 executing program 1:

06:51:57 executing program 2:

06:51:57 executing program 3:

06:51:57 executing program 0:

06:51:57 executing program 4:

06:51:57 executing program 5:

06:51:57 executing program 3:

06:51:57 executing program 0:

06:51:57 executing program 1:

06:51:57 executing program 4:

06:51:57 executing program 2:

06:51:57 executing program 3:

06:51:57 executing program 2:

06:51:57 executing program 1:

06:51:57 executing program 0:

06:51:57 executing program 3:

06:51:57 executing program 4:

[ 1517.419155][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1517.427277][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:57 executing program 5:

06:51:57 executing program 0:

06:51:57 executing program 2:

06:51:57 executing program 1:

06:51:57 executing program 3:

06:51:57 executing program 4:

06:51:57 executing program 4:

06:51:57 executing program 0:

06:51:57 executing program 3:

06:51:57 executing program 2:

06:51:57 executing program 1:

06:51:57 executing program 3:

06:51:57 executing program 5:

06:51:57 executing program 4:

06:51:57 executing program 1:

06:51:57 executing program 2:

06:51:57 executing program 3:

06:51:57 executing program 0:

06:51:57 executing program 2:

06:51:57 executing program 4:

06:51:57 executing program 0:

06:51:57 executing program 1:

06:51:57 executing program 3:

06:51:57 executing program 3:

06:51:57 executing program 5:

06:51:57 executing program 1:

06:51:57 executing program 2:

06:51:57 executing program 0:

06:51:57 executing program 4:

06:51:57 executing program 3:

06:51:57 executing program 3:

06:51:57 executing program 0:

06:51:57 executing program 4:

06:51:57 executing program 1:

06:51:57 executing program 2:

06:51:57 executing program 4:

06:51:58 executing program 5:

06:51:58 executing program 3:

06:51:58 executing program 2:

06:51:58 executing program 1:

06:51:58 executing program 4:

06:51:58 executing program 0:

06:51:58 executing program 1:

06:51:58 executing program 4:

06:51:58 executing program 2:

06:51:58 executing program 0:

06:51:58 executing program 3:

06:51:58 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept(r1, 0x0, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0)

06:51:58 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x5452, &(0x7f0000000100))

06:51:58 executing program 1:
r0 = eventfd(0x80008003)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0)
write$P9_RSTATu(r2, &(0x7f00000000c0)={0x88, 0x7d, 0x0, {{0x0, 0x69, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x12, '/proc/thread-self\x00', 0x6, 'louser', 0x12, '/proc/thread-self\x00', 0xc, '.vmnet1wlan0'}, 0xa, '%security\xad'}}, 0x88)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:51:58 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x801, 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

06:51:58 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7ff4}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:58 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
close(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

06:51:58 executing program 4:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000040))

06:51:58 executing program 0:
r0 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
close(r0)
signalfd4(r0, &(0x7f0000000080), 0x8, 0x0)

06:51:58 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)

06:51:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080))

06:51:58 executing program 4:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$TCGETA(r0, 0x5405, 0x0)

06:51:58 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0x10000)
fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)

06:51:58 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = dup2(r0, r1)
fcntl$getownex(r2, 0x10, &(0x7f000000d880))

06:51:58 executing program 5:
r0 = eventfd(0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f00000000c0)={'batadv_slave_0\x00'})

06:51:58 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
dup3(r0, r1, 0x0)

06:51:58 executing program 4:
creat(&(0x7f0000002440)='./file0\x00', 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setreuid(0x0, r0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000003ac0)='/proc/thread-self\x00', 0x108200, 0x0)

[ 1518.461502][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:59 executing program 3:
r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00')
write$P9_RRENAME(r0, 0x0, 0x0)

06:51:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0xfffffced, 0x0, 0x0, 0x0, 0xffffffffffffffb7}}], 0x4000000000000bb, 0x0, 0x0)

06:51:59 executing program 1:
getrusage(0xffffffffffffffff, &(0x7f0000000080))

06:51:59 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5450, 0x0)

06:51:59 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0)

06:51:59 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x40)

06:51:59 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$P9_RREAD(r1, &(0x7f0000000240)={0xb}, 0xb)
dup2(r1, r0)

06:51:59 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2040, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0)
ioctl$sock_netdev_private(r0, 0x8901, 0x0)

06:51:59 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
fchdir(r1)

06:51:59 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x76e}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x71b1}, {0x4, 0x401}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:51:59 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x23)

06:51:59 executing program 2:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
tkill(r1, 0x13)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x3b, 0x0)

06:51:59 executing program 4:
r0 = eventfd(0xfffffffc)
r1 = dup2(r0, r0)
write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9)

[ 1519.335359][    T7] net_ratelimit: 1 callbacks suppressed
[ 1519.335365][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.349932][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.358646][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:51:59 executing program 0:
r0 = eventfd(0xdffffffe)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
write(r0, &(0x7f00000000c0)="7787950f4baefd88", 0x8)
close(r0)
syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00')
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:51:59 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

06:51:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))

06:51:59 executing program 5:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self\x00', 0x0, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540))
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)

06:51:59 executing program 2:
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0xfdd, 0x1)

06:51:59 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_SIOCGIFINDEX(r1, 0x5452, &(0x7f0000006480)={'veth0_to_batadv\x00'})

06:51:59 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x76)

06:51:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffd1e}, 0x2e2ea359)

06:52:00 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x5450, 0x0)

06:52:00 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x247, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000040)={0x5d, 0x7d, 0x0, {0x0, 0x56, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x1, '@', 0xa, 'usernodev\a\x9a\xccvboxnet?\x00ime_t', 0x8, 'wlan1em0'}}, 0x0)

06:52:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$FIOCLEX(r0, 0x5451)
r1 = epoll_create1(0x0)
ioctl$TCGETA(r1, 0x5421, &(0x7f0000000040))
r2 = memfd_create(&(0x7f00000000c0)='\x00Io\x19\x9b\x97l\x16\xa2\xe4\xc9\xca\xe6\xe0\x96\x12\xa7\xd3H\x87\xbamu\xce\xab\x04pF\x8d)\xce\xb8\xc6\xbaO\xd0\x9d\x9exy5\x15\xe0bK0\xc3\xc9\x1a\xa3\x16L\xc9', 0x0)
r3 = dup(r2)
pwritev2(r3, 0x0, 0x0, 0x0, 0x0, 0x5)
openat$cgroup_int(r3, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0)
r4 = epoll_create1(0x0)
ioctl$TCGETA(r4, 0x5421, &(0x7f0000000040))
write$binfmt_aout(r4, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x1015)
r5 = semget$private(0x0, 0x3, 0x6fe)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200400, 0x0)
ioctl$KDGETLED(r6, 0x4b31, &(0x7f0000000180))
shmctl$IPC_RMID(r5, 0x0)

06:52:00 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCSPGRP(r1, 0x5451, 0x0)

06:52:00 executing program 5:
pipe2(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

06:52:00 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

06:52:00 executing program 2:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0x10ff8)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:00 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000100))

06:52:00 executing program 3:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

[ 1520.196885][   T28] audit: type=1800 audit(1601275920.208:300): pid=26602 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="cpuacct.usage_percpu_sys" dev="sda1" ino=16374 res=0 errno=0
06:52:00 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$CHAR_RAW_FLSBUF(r0, 0x1261, 0x0)

06:52:00 executing program 3:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[], 0xffffffb7)
sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)
pipe2(&(0x7f0000000100), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = getpid()
tkill(r1, 0x13)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

06:52:00 executing program 4:
setuid(0xee01)
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0))

06:52:00 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x5411, &(0x7f0000000100))

06:52:00 executing program 0:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x800c3, 0x0)

[ 1520.375277][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:00 executing program 4:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, 0x0)

06:52:00 executing program 0:
r0 = memfd_create(&(0x7f0000000040)='trustedeth1vboxnet1vboxnet1user\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fadvise64(r1, 0x0, 0x0, 0x0)

[ 1520.630198][   T28] audit: type=1800 audit(1601275920.638:301): pid=26632 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16276 res=0 errno=0
06:52:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)

06:52:00 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f0000000000))

06:52:01 executing program 2:
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:52:01 executing program 0:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0x10ff8)
removexattr(&(0x7f0000000000)='./file0\x00', 0x0)

06:52:01 executing program 3:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x5450, 0x0)

06:52:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x8901, 0x0)

06:52:01 executing program 4:
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400000002c2, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)

06:52:01 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}, 0x0)
fstat(r1, &(0x7f0000000180))

06:52:01 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$FIONCLEX(r0, 0x5450)

06:52:01 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5450, 0x0)

06:52:01 executing program 3:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8281, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

06:52:01 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x4d8c5, 0x0, 0x0)

06:52:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)
getpeername$unix(r1, 0x0, &(0x7f0000000080))

06:52:01 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f00000000c0), 0x0)

06:52:01 executing program 4:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x74c6f167ace3ccb9, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

[ 1521.257912][   T28] audit: type=1804 audit(1601275921.268:302): pid=26675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16380 res=1 errno=0
[ 1521.317549][   T28] audit: type=1804 audit(1601275921.268:303): pid=26676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16380 res=1 errno=0
[ 1521.414612][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:01 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
write$P9_RREADDIR(r0, 0x0, 0x0)

06:52:01 executing program 4:
r0 = gettid()
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
rt_sigtimedwait(&(0x7f0000000080)={[0xffffffffffffff7c]}, 0x0, &(0x7f0000000040)={0x0, r1+60000000}, 0x8)
tkill(r0, 0x7)

06:52:01 executing program 3:
getrusage(0x1, &(0x7f0000000200))

06:52:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)
getpeername$unix(r1, 0x0, &(0x7f0000000080))

06:52:01 executing program 2:
pselect6(0x39, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001240), &(0x7f00000012c0)={0x0})

06:52:01 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)

06:52:01 executing program 0:
rt_sigtimedwait(&(0x7f0000000100), 0x0, 0xfffffffffffffffd, 0x8)

06:52:01 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0))

06:52:01 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0)

06:52:01 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x78db}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0xfe}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:01 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x22802, 0x0)
write$9p(r0, 0x0, 0x0)

06:52:01 executing program 3:
r0 = inotify_init()
fsync(r0)

06:52:01 executing program 1:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @remote}})
r1 = eventfd2(0x6, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xfc, 0x81, 0xaf, 0x1, 0x2, 0x3, 0x9, 0xb9, 0x38, 0x2ed, 0x40, 0x0, 0x20, 0x2, 0x7, 0x1, 0x5}, [{0x70000000, 0x1fc, 0x10000, 0x4, 0xbd, 0xceffc, 0x6, 0x400}, {0x4, 0x1, 0x806, 0x6, 0x2, 0x8, 0xe00a, 0x400}], "834d668978d8e3284d00f60fe52e10ad0691f1fd2ba5dc54a01fdfefce9e9945f27d5e29c7681b6ef3e8b60669b3f1dcc34e91", [[], [], [], [], [], []]}, 0x6ab)
r2 = socket$netlink(0x10, 0x3, 0xf)
fchdir(r2)

06:52:01 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00')
write$cgroup_pid(r0, 0x0, 0xff63)

06:52:01 executing program 5:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
write$P9_RRENAMEAT(r1, 0x0, 0x0)

06:52:02 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

06:52:02 executing program 3:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FIBMAP(r0, 0x5421, 0x0)

06:52:02 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}kn\x86#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x9ecc\xad\x89\x9ck\xdeL\xb0\x1c\xeb&\xa4\xbb\xae=\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\x97\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f\x1by\x16\x98\x8e&j\xdf\a\xf56\xff\x01\x8c\xb4\x8b61zR\x99\x1dcV\x95\xed)f\xbe<t\xa3\xc2\xb2\xf3\x95\v\xe8\xcc\xeeq\xab\x9c8\xbe\xf8\xfe+\xf0.\xc8\xe8\xb3\xae\xd1\x17\xa9<\xddk\xcb\x8a*\x16\r\xe2p<x\xd0\'\xb0\x05\xec\x11\xaa\x81\x9c', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80)
dup3(r0, r2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
getsockname(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80)
preadv(r4, 0x0, 0x0, 0x0, 0x0)

06:52:02 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
statx(r2, &(0x7f0000002000)='\x00', 0x1000, 0x80, &(0x7f0000002040))

[ 1521.984482][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:02 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0x1826bdee9eae8677)

06:52:02 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

[ 1522.454454][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:02 executing program 0:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSYMLINK(r0, 0x0, 0x0)

06:52:02 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
fcntl$setstatus(r1, 0x4, 0x0)

06:52:02 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000140))

06:52:02 executing program 4:
r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r0, &(0x7f0000000100), 0x6)
sendfile(r0, r0, &(0x7f00000000c0), 0x2000000000feff)
fstat(r0, 0x0)

06:52:02 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5421, &(0x7f00000003c0))

06:52:02 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x5450)

06:52:02 executing program 3:
r0 = eventfd(0x0)
read$eventfd(r0, 0x0, 0x27a)
write$eventfd(r0, &(0x7f0000000040)=0x6, 0x8)

06:52:02 executing program 2:
fchownat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0xee01, 0x0, 0x100)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f0000000a40)=ANY=[@ANYBLOB="e21402187e31afe6d19efbac6f897400000000edb9dda39f351258b23c42b7b3f6f0598611853cd9ef07886433ae454061ff89a842846963e1a419ca75f640b8f99e0ce887a9830126f1a5949911bf21a5906e3d3e2598e53c19b25598bd50f0c6f59cf4330600a4b95050b63325b9989f58a9a0412fab01449af95de253a6a56b4d631a095a57087b1b6ec86240096e508d3ecb67dd9d5323e34657c22a7ab5065c9577c7a012530a6d72a6aa514cc26c50338fb80e614511c3f1c41654196a962af552a8c35ea7c26aea0f02149afab77751b1e82be516b118d2695b8aa8a428e34ee5b3cb9b849b445dc8da78a25bca446747ad885309fc3304c5412393ca3731912b2b6414a751205c932dfed77a121407a2842bbf0a864b9661fa35ebcc0c8fa0e4491e2cb02fe6bc2cbcbc6f52ab397889909dc00795acfd4f0cfe1e11b11bed106078d88bfdc56d9255a3aea6267817365aaf3c437c6aa06f6e1691a1c6b073dd8dc997d4d30ef9911402fc73bdcac1a9d92486dcf3c629d026016e7ab7bfdf0783c0f47908b074dc1ec9d3ee9bfe4447ec3fd4efd2eac292e8b48aa74ba1ae181e46338f91a92a02265463e317a430642da718b4f0a6ee49284d536aa355a42d8324f59cb3a7599e25c81c1d1390f1e7d0d8b6c2218520abef69af76d9b51151d91203b35d9e0770e4b4aa7914f9e132e7f3628a"])
statx(0xffffffffffffffff, &(0x7f0000000580)='./file1/file0\x00', 0x1000, 0x40, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f0000000140)=0x6e)
setresgid(0xee01, r2, 0xffffffffffffffff)
r3 = semget$private(0x0, 0x4, 0x200)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000540)=[0x2])
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/166)
semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000180)=""/156)
semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000400)=""/117)
utime(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000300)={0x7fff, 0xffffffff})
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x600, 0x61f96d357f19dc35)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
read$char_usb(r5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x0, @multicast1}})
dup(r4)

06:52:02 executing program 0:
socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, 0x0, 0x0, 0x8000, 0x0, 0xfe1a)

06:52:02 executing program 1:
r0 = eventfd(0x80008003)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RCREATE(r2, &(0x7f0000000040)={0x18}, 0x18)
r3 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x024\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x00\x00\x89\x9c\x90k\x10\xfct\xe4\x8ey\x1a\x1c\xe8A\xdck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\x148\xf7\x9e *o\xcdJx\xaa\x8f~\xb90a\xa9\xc2\x1e&5|h\x96\xc4\x0e\xd2\x12.\xb2\xb2\x0480\x16\b\xcc2\xc4\xef\x9cK\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe\x06\x0f\xa5\x9d\xa8P\x17\t\xfb< \x03+q\xfa\b\xb8\f\x17\xac\xb8\n\x8f\x87)!\x1c\xb6*L\xa8\x1c\xe0\xe3R\xafD\x1aC\f\'k\x9a\xf1#k^z\xeb,\x14f\xd20q\x95\xa0\xfd\xba\xcc\ru\xb4\x16\x00\x00\x00\x00\x17\xf1\xe8@\x1a\x93\xcb\xa7\xa3\xfd\"\x16\x1b\x8e\x9f\xef\x88\xdc\x84\x92EN\x13\x7f\x0f\x81X\xb8uY\xf8\xd7(6\xe5\xd3\x90Tl\x89\x81\xe7\xe8K\x04\x97\xdda/!\xa4\x871\x8f\x02\xc4\xe7\xf4\x02\x11\x12X\x9f\xe9XEh\xe7\x10\x13\xfdByz%wb\xf8\x02\xd3N>\xda2\x8a\xb6\xe1\xa2\xe4\xa7\xfa\xe2\xa4\xe9~\x85\xa4\x05\xfeo\xda\xc5:l\x93', 0x0)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:52:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000100), 0x0, 0x40, 0x0, 0x0)

06:52:02 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
socket$unix(0x1, 0x2, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x5451, 0x0)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$P9_RLOPEN(r3, 0x0, 0x0)
ioctl$TIOCEXCL(r3, 0x540c)
r4 = accept(r2, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0))
connect$unix(r0, &(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00'})
preadv(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000001740)=""/80, 0xfffffffa}, {&(0x7f0000000600)=""/4095, 0xfff}, {&(0x7f0000001600)=""/138, 0x8a}], 0x8, 0x2, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x8840)
r5 = semget$private(0x0, 0x1, 0x80)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8001, 0x0)
ftruncate(r6, 0x0)
fsetxattr$security_capability(r6, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x2, 0x1f}, {0xffff, 0x5}]}, 0x14, 0x0)
shmctl$SHM_UNLOCK(r5, 0xc)

06:52:02 executing program 3:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$P9_ROPEN(r2, 0x0, 0x0)

06:52:02 executing program 0:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x24700, 0xbf5784879d9b4078)

06:52:02 executing program 1:
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x0)

[ 1522.971822][   T28] audit: type=1800 audit(1601275922.978:304): pid=26773 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16258 res=0 errno=0
[ 1523.494513][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:03 executing program 4:
pipe2$9p(&(0x7f0000002700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)

06:52:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x2)
write$binfmt_misc(r1, &(0x7f0000000040)={'syz0'}, 0x4)

06:52:03 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x501042, 0x0)
write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0)

06:52:03 executing program 2:
r0 = timerfd_create(0x0, 0x0)
r1 = dup2(r0, r0)
timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0)

06:52:03 executing program 3:
r0 = eventfd(0xdffffffe)
r1 = gettid()
write$binfmt_aout(r0, &(0x7f0000001400)={{0x0, 0x0, 0x0, 0x25d}}, 0x20)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
tkill(r1, 0x13)

06:52:03 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r0)
write$binfmt_aout(r1, 0x0, 0x0)

06:52:03 executing program 2:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x1b6}, 0xc9015284)
write$P9_RWRITE(r0, &(0x7f0000000140)={0xb}, 0xb)

06:52:03 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f0000000000)={0x3, 'veth1_to_hsr\x00'})

06:52:03 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)

06:52:03 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RMKNOD(r0, 0x0, 0x0)

06:52:03 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$TCGETA(r0, 0x5450, 0x0)

06:52:03 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)

06:52:03 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f00000010c0))

06:52:03 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000006580)=""/233, 0xe9)

06:52:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
write$P9_RXATTRCREATE(r1, 0x0, 0x0)

06:52:03 executing program 1:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = getegid()
lchown(&(0x7f0000000280)='./file0\x00', 0xee00, r0)

[ 1523.768650][   T28] audit: type=1804 audit(1601275923.778:305): pid=26805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16375 res=1 errno=0
06:52:03 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x5452, &(0x7f0000000040)={0x0, 'bridge0\x00'})

[ 1523.801515][   T28] audit: type=1804 audit(1601275923.808:306): pid=26807 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16375 res=1 errno=0
06:52:03 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

06:52:03 executing program 0:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

06:52:04 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8040, 0x1d8)

06:52:04 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='-A\x87y\xad\x19\xf4\x16\x83X\xa4\xc5?r\x00', 0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
fcntl$addseals(r1, 0x409, 0x4)
write$P9_RFSYNC(r1, &(0x7f0000000200)={0x7}, 0x7)

06:52:04 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RXATTRCREATE(r1, 0x0, 0x0)

06:52:04 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup3(r0, r1, 0x0)
write$P9_RFLUSH(r2, 0x0, 0x0)

06:52:04 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setuid(r0)
stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

06:52:04 executing program 5:
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0)

06:52:04 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt(r1, 0x0, 0x0, 0x0, 0x0)

[ 1524.535028][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:04 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
listen(r1, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
write$cgroup_devices(r2, 0x0, 0x0)

06:52:04 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000), 0xfffffcfd)

06:52:04 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$unix(r0, 0x0, 0x0, 0x40)

06:52:04 executing program 3:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup2(r1, r0)
ioctl$TIOCSBRK(r0, 0x541b)

06:52:04 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040))

06:52:04 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0)
fchdir(r1)

06:52:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0)

06:52:04 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x0, 0x0)

06:52:04 executing program 0:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
connect(r0, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

06:52:04 executing program 2:

06:52:04 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x5421, &(0x7f0000000000)={0x0, @phonet, @l2, @isdn})

06:52:04 executing program 3:
open$dir(&(0x7f0000000100)='./file0\x00', 0x114c0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x400, &(0x7f0000000140))

06:52:04 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000006c0))

06:52:04 executing program 2:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r0, r1)
write$P9_RLOPEN(r2, 0x0, 0x0)

06:52:04 executing program 5:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, 0x0)
tkill(r1, 0x13)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

06:52:04 executing program 0:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0)

06:52:04 executing program 3:
open$dir(&(0x7f0000000100)='./file0\x00', 0x114c0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x400, &(0x7f0000000140))

06:52:04 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$netlink(r1, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x40)

06:52:04 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x84a842, 0x0)
write$nbd(r0, 0x0, 0x0)

06:52:04 executing program 3:
r0 = semget$private(0x0, 0x4, 0x280)
shmctl$IPC_RMID(r0, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3, 0x3ff, 0x800}, {0x1, 0x5, 0x1800}, {0x0, 0xf139}, {0x2}, {0x1, 0x3}, {0x7, 0x3}], 0x6)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0)

06:52:04 executing program 2:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, 0x0)

06:52:04 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000040), 0x0, 0x844, 0x0, 0x0)

[ 1525.014413][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:05 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r2, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000))

06:52:05 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80800)
read$char_raw(r0, 0x0, 0x4f)

06:52:05 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00')

06:52:05 executing program 2:
open$dir(&(0x7f0000000000)='./file0\x00', 0x13d2, 0x91aace6c2452ab55)

06:52:05 executing program 0:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
dup2(r1, r0)
ioctl$TIOCSBRK(r0, 0x541b)

06:52:05 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r2 = dup(r1)
write$P9_RGETATTR(r2, 0x0, 0x0)

[ 1525.575078][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:05 executing program 2:
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/205)
r0 = semget$private(0x0, 0x3, 0x6fe)
shmctl$IPC_RMID(r0, 0x0)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000300)=""/217)
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
sendmsg$sock(r3, 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x80000)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
getpeername(r5, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000400)=0x80)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000200)=0x10)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, @ax25={0x3, @null, 0x1}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='syz_tun\x00', 0x1, 0x6, 0x72c})

06:52:05 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x71e000)

06:52:05 executing program 3:
socketpair(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

06:52:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

06:52:05 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000007880), 0x8, 0x0)
close(r0)
memfd_create(&(0x7f0000000180)='proc}mim\x05_type(user\x00a\xb5\x8e\xbeD+\x80\xdf\x01\xd3\x0eX\xca\xcdrL\x8b\x80:\x95\xfefV\xd4\xd4g\x9b\xa0\xf9\xa4\x1a8\xca\x91\x8e\'\xb3\xe7\xbc\x9e\xcc\x8a\"5\x01\x8f4EE\xd2K\x0f\x80\n~?\xb9,\xf0dI2h\x97*\xf5\'h\x06\xd4\xdc\x8bs7\xcf\xf8\x17FlXv\x97\xa7\xe9cv(\xcd\xbc\xda\xda%\xf9', 0x0)
read(r0, 0x0, 0x0)

06:52:05 executing program 2:
r0 = inotify_init1(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

06:52:05 executing program 3:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
setgid(0xee01)

06:52:05 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = dup2(r0, r1)
ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0)

06:52:05 executing program 1:
r0 = socket$unix(0x1, 0x1000000801, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0))

06:52:05 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00')

06:52:05 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{0x0}], 0x1)

06:52:06 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
write$P9_RSTATu(r0, 0x0, 0x0)

06:52:06 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)

06:52:06 executing program 0:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001d00), 0x21}, 0x0)

06:52:06 executing program 2:
setresuid(0xffffffffffffffff, 0xee00, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semctl$SEM_STAT_ANY(r0, 0x0, 0x10, 0x0)

06:52:06 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x5450, 0x0)

06:52:06 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x40, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

06:52:06 executing program 1:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$P9_RCLUNK(r1, 0x0, 0x0)

06:52:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$TCSETXF(r2, 0x5434, 0x0)

06:52:06 executing program 4:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x119540, 0x46)

06:52:06 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5451, 0x0)

06:52:06 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00')
write$P9_RSTAT(r0, 0x0, 0x2cfdc669)

06:52:06 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)

[ 1526.616316][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:06 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x0, r0)
write$char_raw(r2, 0x0, 0x0)

06:52:06 executing program 2:
r0 = eventfd(0xdffffffe)
r1 = gettid()
write$binfmt_aout(r0, &(0x7f0000001400)={{0x0, 0x0, 0x0, 0x25d}}, 0x20)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:52:06 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$SIOCGSTAMP(r1, 0x8901, &(0x7f0000000000))

06:52:06 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
r1 = dup(r0)
fchmod(r1, 0x0)

06:52:06 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
read$eventfd(r2, 0x0, 0x0)

06:52:06 executing program 0:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0)
write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7}, 0x7)

[ 1526.716484][   T28] audit: type=1804 audit(1601275926.728:307): pid=26969 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16242 res=1 errno=0
[ 1526.745170][   T28] audit: type=1804 audit(1601275926.758:308): pid=26970 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16242 res=1 errno=0
06:52:06 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x400002, 0x0)
write$P9_RLOCK(r0, &(0x7f0000000780)={0x8}, 0x8)

06:52:06 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5450, 0x0)

06:52:06 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0)
r1 = dup(r0)
fchmod(r1, 0x0)

06:52:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8903, &(0x7f0000000000)={0x1, 'bridge0\x00'})

06:52:06 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:52:06 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0)

06:52:06 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x0, r0)
write$char_raw(r2, 0x0, 0x0)

06:52:06 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r2 = dup(r1)
write$P9_RSTAT(r2, 0x0, 0x0)

06:52:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
syncfs(r0)

06:52:06 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080))

06:52:06 executing program 3:
r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0)
pwrite64(r0, &(0x7f0000000280)="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", 0x101, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0)

06:52:06 executing program 1:
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)

06:52:07 executing program 1:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

06:52:07 executing program 3:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x149541, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
statx(r1, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000, 0x10, &(0x7f0000000100))

06:52:07 executing program 5:
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0)

[ 1526.989491][   T28] audit: type=1804 audit(1601275926.998:309): pid=27012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16235 res=1 errno=0
[ 1527.016708][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:07 executing program 1:
r0 = eventfd2(0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
prlimit64(r1, 0xd, 0x0, &(0x7f0000000040))

06:52:07 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080))

06:52:07 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)

[ 1527.039471][   T28] audit: type=1804 audit(1601275927.048:310): pid=27017 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16235 res=1 errno=0
06:52:07 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x5450, 0x0)

[ 1527.128552][   T28] audit: type=1804 audit(1601275927.138:311): pid=27028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16120 res=1 errno=0
[ 1527.654459][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:07 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

06:52:07 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='security.capability\x00', 0x0, 0x0, 0x0)

06:52:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00')
ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0)

06:52:07 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCGPKT(r0, 0x541b, 0x0)

06:52:07 executing program 1:
r0 = memfd_create(&(0x7f00000004c0)='}+lo\x00uMH\xf2}\x9fMY}\t\xfd\xc2\xab\xdf\x01N\xcc:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xd79&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89VsV\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xdf\\\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v', 0x0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r1 = dup(r0)
write$binfmt_elf64(r1, 0x0, 0x0)

06:52:07 executing program 5:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x982, 0x0)
write$P9_RGETATTR(r0, 0x0, 0x0)

06:52:07 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
sync_file_range(r0, 0x0, 0x0, 0x3)

06:52:07 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x77a}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71b1}, {0x4, 0x6}, {0x4, 0x4ba}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:07 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000000))

06:52:07 executing program 1:
setreuid(0xffffffffffffffff, 0xee00)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)

06:52:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040))

06:52:07 executing program 1:
open(&(0x7f00000001c0)='./file0\x00', 0x200540, 0x8d350e4519c7bd6)

06:52:07 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
write$P9_RXATTRCREATE(r2, 0x0, 0x0)

06:52:07 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0)

06:52:07 executing program 0:
pipe2(&(0x7f0000000100), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00')
r1 = memfd_create(&(0x7f0000000180)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x1c\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0)
write$binfmt_aout(r2, 0x0, 0x0)

06:52:07 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RRENAMEAT(r0, 0x0, 0x0)

06:52:07 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
write$P9_RXATTRCREATE(r2, 0x0, 0x0)

06:52:08 executing program 5:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x800000005452, &(0x7f00000001c0))

06:52:08 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='io\x00')
write$P9_RRENAMEAT(r0, 0x0, 0x0)

[ 1528.054421][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:08 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5450, 0x0)

06:52:08 executing program 3:
get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x6, &(0x7f0000ffd000/0x3000)=nil, 0x2)

06:52:08 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x80)

06:52:08 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf253c9dd7d9d6143, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0)
faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x4)

06:52:08 executing program 0:
r0 = eventfd(0xfffffbfd)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = dup(r0)
write$P9_RLOCK(r2, &(0x7f00000002c0)={0x8}, 0x8)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
dup3(r3, r4, 0x0)
dup2(r4, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:52:08 executing program 5:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RWALK(r0, 0x0, 0x0)

06:52:08 executing program 3:
r0 = socket(0x1, 0x3, 0x0)
recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0)

06:52:08 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
write$P9_RWALK(r2, 0x0, 0x0)

[ 1528.696338][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:08 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}, {0x4, 0x5d}], 0x2)
semop(r0, &(0x7f0000000100)=[{0x4, 0x78db}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:08 executing program 0:
set_mempolicy(0x0, &(0x7f00003ccff8)=0x7fc, 0x0)

06:52:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close(r0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0xfffffffffffffeb0)

06:52:08 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0)

06:52:08 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x608043, 0x0)
lsetxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:08 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl(r1, 0x80000000008903, &(0x7f00000000c0))

06:52:08 executing program 5:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0xfffffdc9)
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7}, 0x7)

06:52:08 executing program 0:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

06:52:08 executing program 1:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
dup3(r2, r0, 0x0)
write$P9_RREMOVE(r1, 0x0, 0x0)

06:52:08 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x5421, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1528.857992][   T28] audit: type=1804 audit(1601275928.868:312): pid=27114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16120 res=1 errno=0
[ 1528.894198][   T28] audit: type=1804 audit(1601275928.888:313): pid=27114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16120 res=1 errno=0
06:52:09 executing program 3:
r0 = eventfd(0x80000002)
r1 = dup2(r0, r0)
write$nbd(r1, &(0x7f00000001c0), 0x10)
close(r1)
socket$unix(0x1, 0x1, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

06:52:09 executing program 0:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xadfd]}, 0x0, 0x0, 0x8)
rt_sigqueueinfo(r0, 0xe, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe})

06:52:09 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
getpeername(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000140)=0x80)
r3 = dup3(r0, r2, 0x0)
write$eventfd(r3, 0x0, 0x0)

06:52:09 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x5452, 0x408ffd)

06:52:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
syncfs(r2)

06:52:09 executing program 2:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
write$nbd(r0, 0x0, 0x0)

06:52:09 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x248)

06:52:09 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x463c43, 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

06:52:09 executing program 1:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0)

06:52:09 executing program 2:
r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000040)=@random={'user.', '\'.\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x1)

06:52:09 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:09 executing program 4:
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x9c02bd49705b73d5, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

06:52:09 executing program 1:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x0, 0x0)
fchmod(r0, 0x0)

06:52:09 executing program 2:
r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000040)=@random={'user.', '\'.\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x1)

06:52:09 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x206002, 0x0)
write$cgroup_type(r0, 0x0, 0x0)

06:52:09 executing program 1:
r0 = eventfd(0x80008003)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r3, 0x409, 0x6)
write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

[ 1529.744528][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
syncfs(r2)

06:52:09 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$CHAR_RAW_IOOPT(r0, 0x1279, 0x0)

06:52:09 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create(0x9)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040))
r3 = add_key$user(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)="3823580b997fa4fa798d68f869f3347883a83feb175401acc423506b53bf6f5389f462af8ec4c792e73bc143e00daf6c7b518fcbe0d6e6c48d2200a46fad", 0x3e, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000009c0)={r3, 0x1000, 0xb8}, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)="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", &(0x7f0000001a80)=""/184)
r4 = add_key$user(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)="3823580b997fa4fa798d68f869f3347883a83feb175401acc423506b53bf6f5389f462af8ec4c792e73bc143e00daf6c7b518fcbe0d6e6c48d2200a46fad", 0x3e, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000009c0)={r4, 0x1000, 0xb8}, &(0x7f0000000a00)=ANY=[@ANYBLOB="656e633d72617720686173683d736861312d6176783200000000ea00"/77], &(0x7f0000000a80)="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", &(0x7f0000001a80)=""/184)
keyctl$instantiate_iov(0x14, r3, &(0x7f0000000540)=[{&(0x7f0000000140)="80137a10c2b408239420dd27e4bcf31b65e3eae57bb06db996bbf3a9d47874cf30fbeedf9b7b1a66184938d4830cb679e78c5ed45bf3450fda25aad9d48793f069c362371cfc4f1a8f16e702dbef0fab79cc5d7315d65e47c14c52e2b0bb09df7cf7d81d376c12f5bc6c76f44649d23f45f872efd0ff3ee8fdeecf53d49a83e2421159d917bdfce99a956e78a35de675840b390eb68041d45965fb011b5c092d7eb01de8d1e417b858589a8c7f0a4ea7e2f999ce8561071d6e8f2431a96f49b4b997b1f9e3c84c0d06601a26c881e8d9c5e2ef003f3218eccb64a2", 0xdb}, {&(0x7f0000000240)="2821f13966a32d7d08349ac48ab6ac6d3c0b40f0057a9fa456ef8b7172d3ea29993ffad33c26f5e0c583a54954c3ce90e38a9db2a318ca063aeee343ae95d4fd0ff590bcadc0da81c50301c36670f8cbd1385d098fbb1272eeaf9e51249a8fb1a13c306d36a33d3ce54115c9901ba168e035f06963da358d4b0ab4c99fb4381cbde5afa77d8308bfa7fd7bd2b4c0b98afe20f659f12ed414d282", 0x9a}, {&(0x7f0000000300)="daeb49b82e9c7ba14537140436d7e5c009e11a8da5cb0aa6d843c7a2bdf8af97037f1d42fb82b1fac962e3c9e50cf7d809788f0df66b8856e8637d59fe0c7138ca5d5758752bad0dd4dcb3a6b77068081a2e959f587c94cdc97197e1d83b93a8a980da3126b828e730bb71d4f7ee97673447950e8f6319931002773de9d8c308c63b0225d170a56d44697a3aef5e316306b5d2206ced4c3989a748f1bc04a72dc469ac5c8511ee13ffb52dcb379cc88424882a93f6f27ca5d3a634655085ebcc4dfdac2ee3cc9d6b7eb51c13f3a843aae809bb", 0xd3}, {&(0x7f0000000400)="6932550a67f886795a065a7f974360496b7a258e3eb1e02b91f084712c3723c89a8df83475793db96f7c89392e5a2e1ce4398daaee7aebcc2e0057e7a1c29fbafb50fc387d23de5c82be9491740af6692e42c3d592e231d4dfb273f38fc9bcc8e02410a0c02b8b325ed988c4826e8a", 0x6f}, {&(0x7f0000000480)="8d547673156a82657f142f979e6d9d9cded31a9ca4a53fbcdcb4b278e269d66de5876e807c6daa0c4b066650b631f2369eb1fc462d5cea98839050c28d40810264f51a2f9641734f88d089a908cb0974f2a57098a97e83630c75fe87da049e461c52f356f81d1fcef5455185226800ee5332ce1a979b3ee26fbfb04c852f581fd351af69ff1510a278ba3ab86fd4d1170a220b0b9e641b169412a3fad16fab8f2735cfea9ecf", 0xa6}], 0x5, r4)
dup3(r0, r1, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8001, 0x0)
write$9p(r5, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8001, 0x0)
write$9p(r6, 0x0, 0x0)
getpeername(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
r7 = semget$private(0x0, 0x3, 0x100)
shmctl$SHM_STAT(r7, 0xd, &(0x7f0000002b80)=""/145)

06:52:09 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000005dc0), 0x0, 0x60, &(0x7f0000005fc0)={0x0, 0x989680})

06:52:09 executing program 1:
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
write(r2, &(0x7f0000000040)="2e0e2a821837f8c4", 0x8)
r3 = socket(0x1, 0x803, 0x0)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:52:09 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
close(r0)
creat(&(0x7f0000000480)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400)

06:52:10 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)

06:52:10 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x5451, 0x0)

06:52:10 executing program 0:
prlimit64(0x0, 0x7, &(0x7f0000000940), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)

06:52:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)

06:52:10 executing program 5:
creat(&(0x7f00000007c0)='./file0\x00', 0x0)
open(&(0x7f0000000840)='./file0\x00', 0x80202, 0xa0)

06:52:10 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14)
r2 = eventfd(0x80000000)
sendfile(r2, r1, &(0x7f00000001c0), 0x8808100000002)
close(r2)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
tkill(r0, 0x13)

06:52:10 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00')
ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0)

06:52:10 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
getpeername(r1, 0x0, &(0x7f00000005c0))

06:52:10 executing program 4:
pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
tee(r0, r3, 0x0, 0x3)

06:52:10 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000340)=0x80)
r3 = fcntl$dupfd(r0, 0x0, r2)
write$char_raw(r3, &(0x7f0000000000)={"38899d11d6ddb7fc9fcfe4c56dbd565fb6a00211de79c168469f81c21a0defda3e0ab4e2eb34166f9b0c70032e06f83d4e6977b9a0d98a7c7f247830744577415b2b0a5c5c7fc25055bc7c2be76c5785204816402874e6a2c7c3923d953f2f2b18d0615d93b60aae84535c53cd0eb88daad618890b4de5d7d0ef014e71a1901bb340dcf0cbb2b1e335a35ae322eb6e35a7ee0a23c1858bd03bbc3c5e642c02070dceb23207fe94a48f6eb4854159143fc5eb7955f8125b46fc437406687367fba3b0d97cbd445fe91cc20b8e90534161f3ab67f6a2af5840fdc6002f1307291c47eb0b01bf4dacc3c292b932050790ff5e3c4743a613f6538dce5c73e60b6723b03c811051c2ae0ff08c60bce8f8fbe0a962db805b8f956bf7856fafac35bde7764cc012be9bf204d0ab962baf8b1908e8c250ede5b95e48471567472b6876ac558891f43abd076d6ffe09fed553f32ffff6f2bb950e10ae39f8e569576d01b31a509f270e001e5545f0a7bce5303ef7b3ecd12c3018f0be627875b630ddf36ac9f1688ad8437d01db59fb6c6705a5ae87216156e4d76baa62bef8ccb2f34542b23a3794ca96169bb83747d3b8ccc39b9431470b99ffa8ab98ae2b4556fbdd1101ce25dc19f2dcc86e3a68f6dc6c90ae38e1d8c7b3039bf0b1c6576d362bbbe2a561ed770df9ce351b216df8d86f8ae9e2b13f3f40c18ee1b30c26f67160fe12ff669b565c944e959fe1269203e3eca46a192cbfb90742701dc1f817f483b15340e2b301e71e14a8ab25fc875f62d1b55785c08998a2707ff0cb00284be5163448bdd2c9a4b65dc4602f10e3ad0fdad814c1a876747a688a8e5d0f671b45082bb89d07c9994c0aaf7e1ebe5326adccb8541c617ea1d06864f4c6b3c1c9d40a7d0167cebd6046878bcbd27ba4bd291a42d341aa096363bffc26538a70b1de4701d9927dbed6a727c166dfe9e0380a79668ac87a6008b039de5e4a75dc12e8f8dc6bf68fdac1a3ae2dfff501f8530f8887e81a573029fec9acb87088da986c8843ef15d2a47964e7d0930ba97958a56163d1af84affd98ca09f1577fd225db7697b794e4473ed5651d4f6891674f85a0c4fd79bc9369b8da4ad813e88f066bde8f544495e90418f05e332950886b36e5a4fea8d955b03f5e126fac55108e887f19a062867fd645653212a9fe062fdbe575708f0079dd9a09eb93bda2f7ef14328a1596d1fa39228a5816ef19f7601725b18e931e63592eb80235edce6a89e4944204152e201a94d438108bf2624de3ddf23f5154b476bf8ecfa0331aa70c34d56fcb6535e5c66bd12efb2f525fc4a40d46f7cc4e12cce65661ba4c48404d3abe94b62af0886026067ece06075b0c51dfabc83d22bff3b16110a575ab32d64779527851a53074a700a405b4dcefdf3e1b1065506cb77be50f498e8cd85c6d9ee7139d09434f4513348341392a389ee8770ac9fe9f7d47e780fecb7aaee7632d97a1922355d58645814985410ac4fc961917712c0b48ec9f08a2248a9687b327198a05ec20e74e7f757933dca42e7f197162cae0a2c6406526193f38a06f662eede5db0ce65d0e2b2fa8cdb94fa6dadcb89da441558a017b93a71a0e070e7b116a6694419405816dd7632832752dcd5b99ecc7c49ec7c28b13c40411b43d47631725b0121bf86ad483effeb016c8b6e70ce93073dbaa5f2ff55f8c0a976ea4cccfc6e4fe96e75fd796d480799f6fed1af312b018a99158c88bfa4581c8d12f16cfe11396fa83067a3d2de32119695bf0894d94235a099333a326f88f248dcd263ff4a2e20f425fa3a67528786c1166e70472db17694bff7ff192cdb6153d2196c5e20058d96120f5147ff3cd7301f7ecb47fbcea547ed44ff239ba0d1ba23184da092d44d184add36f9caece04ef2c148aeb39899b1d7f198867d0b3afca0af5b129f6ae27e19ba6837582d0a0f0f406f2eb5e979f5016e97608bcb5495612b96b0de1392a5aa2f1dac6d06b97724560b5690f6d964545df80460f7e4304b64c74394f4e44750c28be256e0217e3192dd888b5b18bf89373c016aca1a806dde9722180016d14cde9870c4fa602f785ca7e5d5a0262ef1617d9ccc24ee32853825df727df38c4262d019b8538e415b40d090e32674a7042944ade60fec8269d316054b2ca08217464629e564befe832db6d36c1f0f5dc29b50461c171b8ba4b247cbb9dcba0c97205fec099d511218e01428d1f2318cc138205b9f59f004949703e2dd0611ac825d4f4f7ed96fcfae04c943f599afb4c69bc1dfe29862b728d142828f47cd9e130b39ccaa0faec4eb281007a28962c6ec81ca44ff030b8031d8ba8850fb36d25959732fb49c67945ec2cd1dd3aec8217f9aa93fe5167f24b9a5feabb562f55e5c4bb59b423b4acc21d27ae3f1af21485db3241fd5e0e717d120712b4949c0e9923c21c8dd0fc4782e296861663d68c6e906090a21a56b57d08f031129fef08e35ded7b02fe377cb184ed6f25bcc6a6fb4f39f105ac39762c79cc32b9204d60b544c684488f77c77f0daa1b91c78d7468506ac4efa9edb993b501a1513557d755b3bf8984da61e0a6d53e372cd4465df992fd00434261a641385ee2552419a61e4751afe9db0e085c3ad3bdd3512a6aaefbc9fbec871224ca211f41362269dd5aef103246769697915a9286043f5dc8d86022466a81b5370de5786401d301f84c64dc9c971c6332afefd10a646f6332417588d0ed086469abcac735fe210b7130ea684741cd55561f60244a2345f14dd4fe4d222967d37eb7b8ce51a5ee41d3b02b5ea7c3cefefe668405f2704c33ec258299cbd94219525a3c4ea468508e302e606a27610db2c9fbddbe59408035344ec3dd348b80413b32fef827bf73003cb2230d5f6008c41d8f595254e86bac45f32905dc31ea377ea46980cc9b9335a24151d8761495abe43e5e335ffc549746ee6d8d8b4cd3bd8a342932365f0b0d0b83269398867c26775a4f426c15bc6f8ae9b3912f10e7a334a68d9a276f9d594bdf125e67513877fb56a58e5602271845060ff471f3b72e50e3b6d64e23d0e0273ade5ee2e03f93d7c60f27068424ebce0ccf6a9691371dad7b202effdbc6892b5716697fbe83055f49f75f078f991c57dbed076670c8f8c8e433884d3fa01ed27e889b18c22454213139b949793c1ab09bcccfae97f487021cf12c8a0124b95982bcb594149fbc5f3f860d2bde54d3a529d9f36978c800fd645ac879b070d51af9091c9158402d045859ac3741b1888518e5650abd6e794230966b07e884794569b54592ad2d31ba603bf0962f711fa332a2e27a916b4b28ec2f8f46feeb5d7aa4dbe98f8a834f6f0e219958f226b2085abd189945bff252f12682fb8d631d24cfaf37dabf87af234250a82ceffd11c19c4ad74e103ff10ab15847e08b5aff6ef8c699794b5597d52622ed02226a2dd9b937dfa22542e6d51024f17c2a9dcb0a155d7f53719f3f79e74edd01500531372721125607d1a8cf8169389629f8767747eb1f4ddc06608a2277ba8c8c9d69f733a0cf0599785c6106a99dba1d7a356715786867cbfb2636f2edfc91fa6456face0a8ca29d7908682a06bb0c4ce9c6038f92203536ce1f1f5d89a5ebbea1bdaa19472c45f92bbee4bd27ab5226838438b1778d29d9bc6ddfc63689dc531c719ec802811fd5c6808cf6aedf58e7bda14e039cc9448843344606aa89d0c63420ab3e8110740fccbf816d074958cbf362642c681c78a109dd82ac437b6a6739a9104dd48b68c4f605538cc21d43bf24a0531374c0ece3bc233069e4b8433523a1eddb8651e54d09dfcbff59594c0e2f75b1004dd0651e4cb94124529106399a28b4bda78d8f3b15d4e60782764d9eaa51114a8588638e7ecdff7510bf3bbd423e7c863c5d13050b574440f8c5dd5d6dc5a3d59283af452c5023712daf21de094941367f0efa9fe8a8a25721edd8588490ae10378a4b26a2d9525f890e4ba56941a1f197f991fe2f960353e5d6e58cdc743c32b45fef6a4d4df01d7671248f403420058125251d60bf89d1f3c18b000d75f35b7d9796be9226bf1204dabdadba63cb27f706410c884198a0ce2439409c4f1ab45a1368b53dd018db1a3f8a0954797b4a9273dae61b4c0d19174a63efe07f12c693663996f6b0668f7c594db5dfc7d3f5f6ef52572fe4105ff92ab72f929d45c9c515dc699c78eded98b14c73c038d06e18e61625119eaa68a64e1f6a56bff763f4824c17ea381737afae654bb06bee5b22d399a37f897e58bdf04b96bcb0364220b5a9689ce17d672efbe8488b467edbb534a9f12b01604762aadabfa9135e9eb6d2809ade628ff035223ddd8abbb7cf238e911dce725abc981f37431be0888d10e5d6975ebab97b0d726282f5d3a8dc01baf867c6af539abb308e9fc4a849986ee8f0204496b177ce84bbf0570743fde81f340fc7fa51c6ce1027a673bef25d482d3c102ca89e2146bae2dbfe466861e1a00c9373218d40866c650d8e8c2af2d7bc4c9654fb1243a2f49e7f607f471547b23cff1682a7156ed4400a572dcb70be3a77968c75ebbbe8c9f1ec4f3ddbc6d93a25a8291de6f536f07d3fd62565388b90881f02934beee310b55913660dcbef5d46421d3ec5d954f36d8aeb037f621c0eb755c6aff2621100266e37aa8cbd940602b34868e0d6c07b0a18be3c47ccac1a53f5aa6d25b2d969e375e75dd1062b450e966fc569116682c1e72f9b063d58861c10eacee76a7cd4dc7a819867c4eb24eae1efa2fab240eacfd04899a93a60b10025b8e920814adc0f97e805dfc8a76887d8c8e6eed264a6dd3f8005187b883346d6e91a5adad419b590e715af8a56d92b6ca62ffb84f82b47bf4f3a791dc0d00a59e1643f04b1abfba641ae92ab17fcdaac55ddcc05042df5abf454dac5acdd71ce26d594abef2b81fb6d2254c376004700d72516badf210a8d3b69f236d941ef627941f90034c1fad1b9516ff7ac6577a36b10ac6339460096d8252ca03228f33df383cd4233a1a84c52bff975516e66e73ad70fec8dc92fb80c7c7351d2706f9f2c365578880ceecb518eab5fb3c23f659455d5cc00f8d43934dfc1c688775df9cf86fc18c0cccd72531df72910f2299c9a6827a45bc76a992bb8db877a948d87c36c0928ae29335a17c7755e6e09a22c261831832b249cb8ab47a4959b2802663a58d623f5a28467fb37d43b0a1950154843d6f2f90c5dd17070a3c06f2d708a265faa08f75aae3c92f8177bd8b938d00834fefa34404ac04e8a460094071c1e4307549b8ac01e4cb33851c3e5e0ed39c9779c63bc16d2f5b960809cf0b31073a876475c74c2fc09d4a4cad3d6e6d563830681806c99cf885ee34346b3f8fccb9e7e534f57d7c66015203a74536e2809bf9b993b1674acff7a1d2fb7b0c904f25c2692f7b57fb57ff6e8434c8cf71999bd122b8c69054cc4f0b6c736ef3be242f8df44b8dcb651e7a041abb023cfba7a379460500b2d56b975d3801337c848f04c8dcb38a58136a143b7756f8d7d48d5efa343caa4b842f1975e932279c2ff4c994ccb0aed0f9a83167c4dcfdba9be712ba46a3da6b689b40301742dc2262a3be330ae52c6d687df6ad7358fe45a0e602d2112ebf3c72bf6d63c32782cd8def0b929b648d743d732c52d53ed681ce0e50431d9b94268ff9e51ccb4daf62bb6d6532352717c72a7ba0b69ebd7751c1fb7a3a4fa3f88bb814c444dc18ba3e03fb6c7c30b332b683f1136f08f5b438da452a86b84587d4c82bab5f0e5e651c53d4fdf54468967986f1a21cee0a5b8f7c9dc1773e07218bf0df0e8e81e1d8e7b5992dab6125f4d63d6051560ad739c66df4e52a5427dffdd4c2a0ccde2ddd9170caefe05d693f1b47aa8786e49d2829eb083c85b795802d53a431db70948e0fd1c740b451ccbd69283938042bd47e4b92793a26e18cc03c149ce63d842d64738a28df828bc2a0a7428ddd1fa2a851fecc3c4a30bd5091a3070b297455eaf2471e1d2cc364ac015262242bd4c9ba182ce040509eaace26d73fc837969c3ee156b831b3edb54ce5bc6d0fad52607bef34740ff1929154c7dd943172bae295a04e6a645174dacf19a36f814445cc89a44dbb148ebc6bd3f7375298d9b7cf024635face75afd070f189b9936f307b4cac73ffe06c67cb7039f3a8e297aa26bd158c86b72525fd0553515c9e194b3bcf50364dfdd995c367ff91ceb35e959a7616b99327ecda6f59a55c53e624a4742364c0121cc499740ed079eb3f4c6a826f99b87900da95a532ed8b754302b6104953ffa96d98637d186d1235674494779ad83c7fc2072e626f58255a8ea100e8966a502b2da215878c858612d9eb0520e624e67dd10516e447a8b50d2b46a0db4ec2d6c46d0761001ee785718b9a0506e1463811b9d51d4f599f107f713ffc7399e98d4ddafbfa819fa85e57bd3fc4953cae51e83242fc77bdc2204b8aeef603d0db41346d4662939a0b8c52dcf5076d4f57223cc6a71a10e94834ba8eebbef6a59404445b11933b749771839ea02a7e1aaf57e15512a19ed347546f599926679e1ee78800e164c9e5911b6610d2f563e5fd6431ba6a1a49062e8382d222579b4eaee10ebdbe951ff72e6d880f353302e93fb8a5100219020a88677b8d5c3a74ddff16563a8808acd6ceee5a83d184a7e9311998c719098961fe9a8296bd4f6bb151462154ec5b56425d2ce80b5b7f3ec627db2b0b0dff8ec6a7cd30aa60df9249000feeaa56ccac74650c593f06b745695e949e0521593dcd880fcea98fc5d9852ce8b14bd0c6aa1f95b3bd65aeb429d81d63b61d6d77cd2246eaec34dce27cf72b7a8e2262f05d1950d93b750f34d10617f95e5130bb0e94ec7da07ea1beb1856c37728d5551d837b0780ce22587fdd80c5c35f838c6d02121047120e110a65d5f2367d2f7b3f656b0eb95e2048bbc07dc795bd975cc33e388f09caa669f8f0833b878b066c5ee403d711c6c99e169d184a9af845d9f160170d800e73fa07faf5d3fa91187cd893c0e315a033772e78a6a85cd7b50751df0281b7c63df0d44082f7f07726cec7188f3bd5dd13c47b5727ae46e0e3f5ba4fb9ea1131cbfcf92a39649e7ef94720e5f30830c8d04e34f3bf17910b9300bff99ffda5f5bf516f0a968f7f236789e719adfbd67033e0750b1b1acaab87a4335f234e0425e76974a843838915822e50452b859c4d739fdc8a1dd994b83395737f5ce6df47215ea83a3dcec6665b240c9e61a6df94a73b89007bd8de157aaa4bb77583ff93cee9921d7554a3721f2ba66888f88b1b0f5864d44af3755aadf6f71c8870c6674d8186c975900e6924c09563f7fdbdd81a1c3ded63a707f2fca87bf3674f800082b80970dd5c8f4c1179903ad82f476b101adbb2f073e84bbb316a0d0807d8ae3299f00f671e286aee02a5aaf0b9e3c4f5942f3416c5139718cb5e2900c869f7038c796546379a21ca34f42d36916b0484fb2b8d26c4b59e9f8968c96c6bc0058b779c13e4257a398b1dce2be785a6e20e0ad0031b2f1cf1b4ff200603552442442a9b8b1f7d3019713c095832f2ceb9dcdb55d725f6333af57b1abac2fe8f425b6dc36d8a1bc33925fe5db9d0217ad0b395b43d2387ae187cee00e41f5e90789005d3dcce06ec9c21e44b4413b05a597f108713f4b0b579499cfecad736bbd9e93627d68bf3d59c8ab2c88d291b27175a9b92e8490b762274d5a9e42ad205a8f4063494b0dacfdd471a2cf7fbe71da25901968935a1bc12d87f7ca34b1f42567c1a80b0a427f117c7fb96d51bc165f9f7ee5a6ed7fcdcbfc6b141de3afa84892eed84b3709d501a0377af6201128e3296192991afe130e0fabc950c3bb69fdefe8bf620602055cd1b781d28ac810bf47cbaf042bb40fc3040ddfdd1ad9f4be3d3e24a52fa0ca742bf7b18af42d8333707c081c239655e130f2b8bc243432399b6d6058f3bc3742c8115600ec3f2c65f918f6083841c26573ae4f7fdb775173922239f4acca3ab15a26308addff5cec3580611eef699b2744154436f9317d541c3f4b8cb967ec638a79ae1295073842f78c6c045b020ac0932fe3224730963497502d5cfb60f71d14680740b8a0a66ade37d06b06c8fef498793d2a17afa7beb8ceb1e0bded813db3e7fe8049bd73a51afe0efcaa31a829f0ebe171e45e229b37b7eb8cffee665007f5c1438dcf7d29fa66bdae85a788f4cc27f6b17b1821211eb9f8907ed3f2d41598af76d3c8221b0f9da3de694496c10fe8686252f85303e8d6dca5760e4aaea33e687ed8a90644177031761170da3c00d1ea41878abd036c48026c8fad48729480359c154ae47a895e1632b53f16214b6e9decd7984f751d72da345a9ff55b2750810df825d572544f226bb7ae9945f15c26a0b03043712edf491306c27b323b14aad756262d0b21c19cbddc1cab8bbb3c254a327dfb6df9c3c334b60745ad1078fb80246edda16de2a40f9576528eec0476493691b82f7b3b75ad5b7592c112ed3d7e552d454fafc14ff13bc93515d783c4abf3b56b02488d6b77bbe79b70c52d74b413a6df9834f0d6601db7508d9d629403f0be19fc7a5db008bc22a55d767ef7666fece246c128129bfa8a95106c1d52d428d7ed89eca798ae20e8661330b955ba1e7947f282ce7dba1533da3719c75c4c1e70e19922ffcb688fe6728a737bd80a62b06de664fee12d5a92ab481e5dd0f9478f38d46338b01c44ba8be7e8dd3128b4e8478730cc8705f85a530968f72d9bd7ece412b088f4521c7212b54da2e72ace3363c3ed36fb7cb96cb3ac24f3c0df1b986fb878822a807a136f63ad114d01896ed3f486efdc0b86787cc94b5ff8d6f785d27fc3a7e740d9d027acb51c8f5448938dedbfec4a6516f69cd6e6671436afd271617eeb4e0969182ccf9f759669a33bf8528eb481c689b6a83e90a85fbbe4a9db66f8624dd1d114d464f594b35cb4a728e8345ab8c6d1bb274dd6a3a90f06179bab158318d0797bc859085a9dac919c8d0877fb9442efc90256ff123b4a1831048faa6e5b7da88b93e23cdb1aea1b8baaec0fe0ae411008eb4ea26a2d432283e17ca06d9f50015d66c0d0cdc4b4c169aa486217072960eb8b9bd0413f941117fc305e0d620d0433090647d165f634de30fb82e1ff05c2f6be139737f47ea58b36d00bff937b29f1df482c6a8fe619f012e9068ec4dfcf8034bad24b0e2499c8d3f1775124269b8bd3a419cc5de0fcdcf826bee603aeff63261908dbcd3f849c14acccf8ff41278228d7fb813e7a5ccced93230ba92a160493e80bb4cfd8d7aea9e22651e947cddf53b8b79c38742ac24b49599c61e3482393b0796bede9fe6cc6a423a9f8143c647c4a2b14220e3c5b674b7c658444a9be91afdcccf691520caec585e373402a8b49d77463d64ee0e7d9497070ce6924f9092144d0df0b9825881539bff95a73b56651cda9c09d2014daa2a4c2f989eaa67dd2de33a1fd8cbef386e00ac53801c6febc55360b5e1d690a7f0edbc78740ee6a12dd941d8477267763eb5e4a7eec4571219f6f32572f1361abceed1cfe1dc539fda60d53c77552d47611c6ab099a5b782d880363b30ce14014cdfe571c70fe953c9b475825ddd0efa8afa3381011022863bbe0068b72f85001d3c875b8adeb2e5dcbbc604a12bc8556254d9c134d857830f958c65937bb9320d1f25d7fb04a98af18a063200a0d321ef140ed3bb36fd058dd08c0268d7c5a86806e0f0f0ad94b52a14f4ad1d0adbcd636ba6eed6cd68e31257336a9cd4a6f3d8a17a9fd06c2b9da8fc42fcaf8cc5ec1abce529f8df96e0ec5f82d83b2c11dbc6ff276cb05ab034d0566b8c6b4cbbff025bda37305a2ff762d7bd0439a19b77b72844da501041dedde9070138f21e8b4dd5a496002d4c0a6ede88e391012027754899f6a87d794138bcca254db009002096e4d1e4b74961acb7ab225311f9b368d28e00be515e7586ec7a774daf921ae222ffb6b4f89f4dd1e014d9d041edc729aaea90b06df25bf9ba05ebc06b9c86bf167439faa7d235ab85ba28a4a25a59bd4ea2d5b9382304a7bf77d60121bbd1a81f628e90b93eeb27b6691500d0223f0f4f4efdc9ed978d9249a3854b29229278f8faf368133a136e3dfc9a7aebe40dfe1dfe484f1f0be89e5e55c0e48773c858f735f77cc6a8b7166b8485a8d4415a86e1da19ac311b9d77aa3e22bf0896531566806b32f81e52e512764e5121c172c55ba024d31a742dc43240d224038df4d5ee5d478304adb9251a4df610b686b5935abc37e590bf60577bcf4265e98374c374de4032fee2951cd5c59d279b5b334d502f827c4b947744e6d684ed424968b314250e1c2e3d24c8e6a15b4dde5782079e9a73c49b99cd2712b95b4c38b72b7c0e52d954077f0b52ede078dcf785597591e555164e47ad9581c1327ed1e9bc7627ff3b7a71bafc85defba7a5162207b08e902a9d790d089f9d39c7f30ecaad3943d1500eeb74d34c93b25bb4d12940ceff5385d11bf817cf35429dc643404662d7de3221a6a31a7e2bc3e93c9eb980e87dce31fc265099411d9d84257cf5306e95b4964fa936a86d03ada7f984b0fe59f6567119c7ae4867dabf93582def24de6c4976f13cfd8684f79ddca7caf66695508e2db3afa255b66817fd83d5a3a1727883b4177c71abc0d9540a6e77c44a73ebe08f9ae232b2ec876231eae29a5e8e27885fddab42f74e02eb0f2588ba0190f8ef761f5e0c1b0dd0e8da4d6c69a457ac349aa010a507abaff54a5d6d602d741504fa56ce49b8c71d132e28e5f8a5f05a63ca0d5faff36440a315437885528f0428be8dd9e641e9005548573731042ab04545223dc6dee9b3770a08e0d5f45824d482bd00476d8e527e72c65158e95742384d2da451a49c8a5de63f209cfe9404ad986b45ab4bdaf501c50af86f62a04b0c5eea3a11774fab339d5448bb0580bd927e83e737c9f21188f9d01b1629f754eabf8554da1c8663743a7f3d3aee41ddb59896fd259ce5dab881631a934e5dca480bf45b66b9c03bedbfd1c42f2a824d9130e63219e855fffb141204cadab0f4571387b93418c562d5b453ac555fb92f4b5c7952d9062a8ed50f13b37c8ff0ee3f737acd1832365bc6f891d422fdfe13e31a2b6071fc837bf15b33e0e223a1525636f83963658d8dbb3ac9831945f51fdcdf15a2d6f4da3bc490588de03967b51345eccbfeaf288a5ba326aeb938a2c42409e0bb0aeef1a20fc342c00c5102aafe298a3d0c995b6fca5a6a4baace7a3d984f9c7452e7255ebcdcb829dd12269340270925413129d59da6db2cff1ff03075aad8f743b015897226ac1ff6f548510da069f8bb845da46c3dcafa5ce5284adabcdb7d6baa52c8003b7dc0839dc62010d73f3918a3c7a9c3f4201d9b7bcc2bfc443145f5a7d65ec0133bc6f59ebf37e3e1d91ddb87ec02a6f598c30324d1066670db35019bf285f62de143d034cc02a53d9876d95dfdc76a7dd9091912e07e1bf3221c22ce9b4d5849cd3476947582c7fa969d0b32d6d88560d2f82b550f82e1f1182bec4fedf0bfa51d63e1a86d7d7eba8b579924f7c54bea18128e7131572b32a4f9e60b7f1065a9108f5310e5d75fc51a85c3b69ee7ec6d31a2ed806606a455f7d4f5d4b66e9df34062f09a28de07a5ae4c67b728c873ff543d7b6c174e51ce00f0662a317f1ef5dd0c3029d0357597e79fd52d648c937a0681134e191dd4caa1b0664ad6db17338e23e3b328619807612c210734afaf405b1abe17a273b87b1cea85f298c86fcdec8f803bc7d88ae67f42bd455309fc155bf6cb755b51b567c910e7cd9874fb7711afecfa79bcc6ebc4b55288ff67bf766b1b311212829b3b3bbd13be38b649ce976d5876dd2889104f88d5e309890c290efd5ef9e207b2ad2db0856131d2ec98649dd2db4a679569aa4d43b1b2c2a4125173c39ad7b9daf80c645ec4b2ccd45f9d95a27f5f70caa500bc2b1d674508f67e328c5124c8f28b258c8146319042204e13c68ed3bd3c9d8e5b39836271a9667659a8e6ba05bd1c47854142f2ec58cb8d3577e3212a933d9aff9f8eb58c2344a39745d3eef43f5552f28dc6cf744fd53a13d315f817465e07ad4ac1b9a136817e39f15ef0c0b0347cb3144665f08c6869392de4abe29ac2a15e1baec8356f4afaecaf716c3c8362ddc2f3d2cec52fa93451eb14c768f21f5f8595447205b2c6716d9415445378a2693060a45100a23d36eeb9f7322359da745361da68fbaa69ec33e924a1d96dbb554430ac42ca9c48f0039b1d30c5e98cca09377264d8c7845b67c2a4e2b0d8709face93637a9f0855522a88f9d7cf6726fe5c25c8b1d49ae68b6a882fd7b63ecc2238bc76ac08fd62af4c702d4ecc3892831bf571fb7f015187969d611b4ae55c87aaa26732117c6c95801156438bf4874e1aa38073ed671dd1ba6a83a4c5d3736810b1f9f1a3633d4f7a82baa4eb95adb15a92cadbce1817828933a1c9d6c3d32fd810130569477e46fd41a3df7665f81e36a3c0fd9f0e0a6e5a54433fdb19bb307894c2ee62a4c572a167fa6e1d36a01b2f0585e613f362a48a005319b3393d0c5cf6b20893840ea5520bc76dd5adacf8a3894540040fe57f4065b6aeb9e75c4fa46f9a3d7c897f86c6fb0fd2cbfecfe128983b53fdff83fbb79f76fe62db39cb1d7d0e7604fd83448623b60a89b9d26f234e89df71f5ba18734ba1238b7323082a4fa12d5ece11cc02c85ab878bb2759706955077ea9dd389eea90a869af139ad93f02a0b4f55b3eb54b43da71e59a20b2c5de9173469398df3d8ce3e31cbadd2a55d05dc9d74077f9a061904f25df4629e7265a810b4666148ccf49cd9dfe75c5cdbbcefdd2f953eb666f7593afb986c80e373d9bd0bd18c568e1ffa13ade4c2265d2968a47d161dc9c66fc63b4b9a53963ed9512bcee39dfd0574e637265d8f78bfccae377a4afe5e981d77f93a401a87890c570ab779dbb4107d2711d68de3d19d85e168aa3785d9b23e05ae3fd4e0a80f2f1222c383a8dddbec808f9caff1e45748e5e8134a2ad0405f61058c3832f649d69927c046c85da78ed94a04cd879785e9403455495a7e67dd6b132c86915d0cf5bd3ed81505e5ce5e1842e1f6a543495fecbfdaa06fa61f6ff31265fa7120f7c9f190abbc758f36641518be058c416406d99d8a8be11d9155c5b1a0b06f2f317a4f8b062aaf0298817cf1b4817f290932f47e3ba92e641db8b7250110a6b47b92ac05f5a8ff14c81ba6ae02764393f4058b9f8764d3a1bac7de43888f8ffa2d9c00d98299bcc50312cdfe72cda57235590f85ffc58bc8a8532d41123c07bb267cad2fafa2dd387b368ab52b38c21cb7dfa1ceee264ef5f107e38792baf81fe17675c10e90dcc90cafefa161475d2cd7f55a5e7aed9a2884bdc0eb904f9f4a43b9881c125cea3001dc92f5d552089d16d20ed911166685d484e9b3198f051ceb862a3f8c4a50b5e9527ce1d826cc8b00e3be54374584b5e3fa1e0440f37f29f9883ee5fe961a6616059ca6af17d141075818cac4f31fb0efdf00b33fb03a75df5b26343e11c09c2fc90cf7e123556941066730a7c75635ad1f0d2f664c871479801d9152c497d86ea353a95fafa397df87e202b8e0fcb3526f39ff510ea3a17c0b39f4d91457ac70f8f8aaf05a35ec00093974e10234c3de07052bf2d46b18d7dd6ac4eb610e58bc452c0c286f98e2781659ddc5ee59442fd470854e98b8a68f909dac9f7b7cdc15ec1b916c55e05548491bf3d72b59a339d2ea3b3cb4de9c062820294217eb9f9c6bf4e64920c85f16f1f0026611bb834d79d6cd36f0d991aa6dddc653edca7702fb96c041fc61a3a1cdeed477112302f4ef00bcb6b8cfdbbb120681d8df225fa26389bbb432d8d771df70512f29675ac6770a29dfe10d1a17a07fd9118d51c63fc8290580c647c05e20907b7e999027799bdd397d7380615eff454046acac2493c562ee260b90d1736640f832c26ab64761b6b8a4d0cf9b60d0178ebe2d7033186787f705dd5007a855a9c480ba31e80135a9995a608a66674f95409e9004cc455bf9b9ac72fe744bcc5ca56e1ac52b11746b2e1dce241475251b4f85c402215fd68273fb922bacac1a302410721d37a3f330a320fb4f0ef148239e8c94f15cb607d15d08e22613f616ad20efcee093f3caac072350dbeedcc421a0a5444936b9d82f0205f80c90714c3ccceda2e2bc7fe682297b391b421a178efd6554db2fb1e390620314e5a6d11570806f7307a71c624f1a0a547c1b90fafb83ae195a6837596cdf7be77f24ed267a91ef7712254a297c439586e23346885f1cc5ce4e797af57cb5604afe80451c547c85ca61901eb2caa2e2a6358959b14b3f8e4c2980bce30866cf7512d6f3789bdc82dede5f12181ac6a83f533063ce8ae7d5405661b20e2d8bbcafc9cc6dce803c07f4c5b2ec528b5f05348678f5685dae6906f233cf641ecaddc165039b5827d4308277549099d5d4829e33a7b8e60f0938681e8d309c9d21fe55e750182bbc04a0c158d064bb32c43274fafef160db9981fd269dd920d7d477bc33530436a2e68efe88790a2a5d7d9abe9f9c210ef8dc476a7ef8a99a77ee7e5c8e648c360a6629bef715029c1fcc16e2b0ebcff23fb3985a12a3121148983ad3b3930d81fc61946a9da8e20d27a3cf55792a92caecce7ebaef1421e0eabd40f6298400355dd62ee8d043697bb2336d3025b9924b9e2d5ca82a04f4a86d7fd5ba7da668ca037b69f5a7eff8c60ce848dc902a777352ac69d3a41e283c1e9b8cef00b150f34908806668d0fc8f47aafe3d1127cbb20ec6e8b41859784e41b16b9605f9df35609071d4bd3995861cc29bad5cc5d4b2e6e601a0b690bc1891dbb2d2a6dbfd62aa8fc36a5120c3da35f88189bc4e9fad6b5a95a58d9d2c5d75df3630e846ca4e0549b346293812444ef4a29bd0a878208527ab911fe84f8d9e590fc56b4bb65132094f65a122ebda3e98eace6b80acafd497fb1a1bae1cd3f928af3cf5a7027c122e8279ee066ebe186ce916c28f582e22a2a6dea05680110f2d9cdce6ea76ce97d97061776efaa40965f65c39449b8f33c22a09188226f9ddb54752d6f7cf03cc0da0644f476643c278d351d60ea1644db294c35ede4965a688cfc7017e50f20441247bf8ef47a480b3226f22473aaf100fd7cfe0e2c67945a8f4fdbd5744202f93914a44370c43f12357a0205fab2a74efdc9a54791d9deceb38ad84503e708f68c4e000c9a8d7de391a050309a9874980cf1acc042ef065f2a84a552a1d1fe9734f5b577af0b7bd7b13bda9deaf28fc6e50a579f99c300e2cb5089f6b009ff4b6aa22e6b081256220f8426d2431c65a6b726ef2d1be89fb3deed11e83ac68b4745854eb80694f982c9caa3be707dd16932ca916c726459290281c69c7c5fa14b1a02e57ab81dd8eaaeb3b7807f96fabde43ee592009729388c285c0c67aa6f65c81221e1a1f46c6f397f73ea5e90eb76467b3086159afdcfc4b87e5e3909ec6e21c326b40ec700876dd49f293483dc082fc148f1acf3262c1aa4bf3237d98863ef8a712495e78acb2d81ab750a2e24d8b3bbb4e38e079c2c6ded5468829aea6dde584894d402a8534c8c8d7fcc4901df83b68fe2905c7736b291bb753fcf390cae637ebc893769a642fba7221dd2be5d22767b5cfc93168281119b6881310b86d420ddf0e7fb9f2aad912cd731ee785f65760b2a2c8120014f39e1d6a86dc551ed6c38eb6acf3827dc6ab20bd3018c3491ae6f117dede2ece5c85f005350d27c9da55e1290c7439352bf8c5e2e74b22bf42c016a6391f379e7057872f592b79fa44e51145fa480a7d562d066c754e3df2779dd03bed196e75308d9f4022fb3c39dd56b97620721bc5120d163d11b3406cc0bd89eb52fc9da552c3336862df1730e474828abed997581de4908fb2b05ab148102a39433c2ef305af1186536ef0eef08b03b47ca2f19518b4e4e8ed77603ba14363d2b3e6b255fcc94628eec8d24173345846ce867b95db4c62f2030d02679ac61ab142d81e8f61ec11b7410cbf771c6c9fc112ba54c0c8317861b3880095089786fcac6ca52a575e620ce4ad4f4ad658295b7aa74c1b19f6a7c7f2d05c2438a2c7bda611e52bc81bd53ddd1a8c12a47160e1ce9b59418b0563a02d327c776f544f7e591ba1ef3dcb64c682dc02cce2287098cb9b402fe1dd7cb9f5b397eb6837b7cfcef685f94e74b1b2d529c39646621d398a85450a1f6c75a61e388f69e2f41edfbbb30243e27cd5dc382664e09a17680ac9e1a689e0cbcb2dd70dbe5a1f3d958cfd51615adeddaa0a35a80ddcd3672a497f0930c6eb4455fa950ad357a1f8ed5c64589f3d1dfd977586b35a7c6d0c844f43bc5d909eee5d8f65ae4bce55034e2878304725e1ce6fdf8a894bfa0fac0f782aee8bf7aa183cb49a8e98fb326ba57f3ad58133960fbaa1105966e51991e5c72632a06ef32f5a269c01a58bb3d5812f23ed137536d14aa4ba829a425c246b5b33417615e53a3db269c3ecb37a59412a1337c36b5b428e76b0e5a0bf844e63ce374cc57a010b3f83ad08d2592d95cb39abcbaf34cdfe4802954ad26eaef7ed63c351734ca46f32e2cb9972dd7c3779fc18b854a28f1071abb4450269bfc41d2a54f5e92d3ca75fbc285ae6a6a1b1bea22a007f17e068fa245850070240308290d407ceb788e44a2059739a8479a3a21862ee7f60548a8477f6d244b1ae5b6e0dce7f1db24b343ba928c61f1a3af6f8d74ce061b053d256bf6f7cde2f43d88e0c011089640a715e2190e53a930b39e653b458e290a6bb9f90238a7d8886352021222c6b99e77bf7a719709407297c6498aed9879d383a5848ef6e4219c00b1c4fb69e83eec199c34db1bdea340977d5ad3452d1d701f7f27ebf283a09201a1a54e468f88b9cd3a441feb17aa8570b4a0f3add771dd964172330fd52a9b157f145e1f7e6c92b75c63ad2f26f0b1076b49374a97c3c6879ac0ffc57ab174fdd19489872fae0a8f2b19fdd30bc71bd0e427745f5e426f8a06ee1982a27c9cf12498a3d6b2f60f45c21efd8f03b703af70051865a011d2c399720491c0ae0e797dd2c9ea8f89fcdc931a3b0853b26a6cc3b29c1d0c3002f201073cf8da7ba32a300c1b8f36a417b1fff2ecc2ed7fe6dd8658b5e636b6742b57c93ca9dc10efa3582665ce41fcdd4fbb6349bf6e21e8074928479c16988977ff07d5b73ed0113aecca7540b69268c95cabdf63b3d981c0f339480fdc464bd30784dd7fdb7f9e119f0009bbf4a7bf03eab8c0d57246d74c5995529669b8f9b5775b49b6596943a3cd27141db4b6a4c338bb424d689057f33871433f56d1d9a761a80bd6d35cc2f7cd1e8d5eabe6276a52b15d2e90b267191072c805bde5522366962857eef41bf20dd7ac40a70e53237231be96b84555e9a4cf456eda0fd5f3c5fb73aaa5fea67275ac4a2faa6a58c5f1b62babcfa87186194f6e5f24a88b03e74e5e8b3eefaeac4f78f1eaafdffa88edd39ceb634486cf1452bc2380a4aaa7643587fd331182fef6839932c1bf34b8dd5d50765223bb29c4ee554dc4573585973ac06dfa8907aef8260039774b5bcd22818447a8e27f80c851887b6bcbcf9e3543a3ad56b8071aa1c35a50962ced51b5209321290c232c76ca4597d50f0378fcece168ae0aba294e7bc8195ff820a92fe8e252f6cbf109ed5804ac97983a5a47c7a2267f04a109b833db2b6e42eb65ec3cc3da8a23e430529053aa6c2c05a6924ea3e0df32c408be5ec9478e77a29c77868130026464c093017573b2849494a5b54193c1436ad4fe02dec3db7cb73267732a9aab56f611cbacf6e1f360e1e396e18ba65d4496531a92c69e0d3f27a61de5216a524ac082d3b3d8503d1f69f16707564f67f035ab67b8397f298ffa7cc661b49bb446b0f3040ef94944a482ce3ae1ef2114609d390c9ec8e4c7b133d89fd243242054e5db5194330c698a3d5cd46f8a5eb35c1caf9ce3d0cf1f837dcf911206812d4d859d6367a981070a58352af1da6f4208bf8b52dc989784b25ecedc469c5f9a9611f3419617deb1d9701fa0f5a021331806edd452a8cb3f005186f6272b660000c59442f033b771aa15f2fab9bcaf5a183573305c4c58521b2ff05f53142627a67f1dae00f532f0782d29e7b13cda99460831f7b72f3a2a6747dd4fe7f2ba241936a34641323595a52418ea6359fdf77e4eb32048fba2d82adb44a4e4101c68c45db6c5d2a874736f529e3c363d005e6e3cde5a7ff47f6e8032ec33159e1e94bdd9ea6aad27037f0f83c0784a0c6a8a5ab9269f5e3ea3a39d6a7474668dbec995f6a6786afdfd8d42b52b16fe5d7213cf012554438ed2ec54032b20614aeda33a2b210249075163ca2ad1f5290f49a2a03c8c110c9a7b303bc335827b783c92fd328469b81a5cfeca37f609acb496d892350a1951df9f2a0d9692a1353d5913b298cf3f5cde04870e9e86daa9d4822e071b77579d40d9e45f0bdb238dead5bb8d44bc4d85e4216755842ced30cbc230d1dfcd99662a453b11115d12da1423969a4ff599fc53c6d264b19f94f20e71bec522fed7217ca078811b0055ae4dd421dbae915383f357ceedc16d8358d4ef4f2ccd0c059f1a36fc25fbca14bd663f64c32edfdfdfe3a6f3f324d89174b96f520f92d7ed4970f2702631eb3392d4b7b1806c84d3863032049580f155f00ceaf36fe901493f090b2cb4f8c3004858bfccd451d4d92ca3bbe256556a2286b0b2ddd8e582e93bb830e16e46e143b9b4c3805393409b1a45ef1fb2f9fe1771ac8c9d20263f23329ce21e2292d7c85cc0d4fbbe7d86ae4c5e3919676a6b022b93f0a5206225a3102bfd8804ce3fa8e12b01cfb3948edf011e57e44c9426dcfdfd2cee6b189788d62d78e3b62460638990565842d52163a144dc2eab30c242b30b474b9d78145832b782c723fbb7c6c0680e72846965ef1ae8ee4a9e7405ca125da7fc575eeeedafec4572fede10c0978efc95ce4a6b1d0ac21abf294fe38b41980f757d052696ff1a1e1e4bd064c0943eed7898a2e9292f7f06a7944f1c5e9d90cc25f0439ccddf39185cefda35e5761c75af5116bee3f1b37c7a8f4335093d48b71e09a2ac54ddac023c2532888fc0954570b7b34030004f2730752ecf2b50144f1e498a329ed9bdf97c8a277e54a530761283d6aeaa21202a34c34db9c625dee4a3fcd3c1da2d2f3a9d1c829adc5d09373ac051647eba619fc7b2e6c358b82adda20c4fb59b797c5e83b77226a2453a802a10ef825fa3232c332bbc3e0d281068f89d5cfe7333306ee9b54dd1f7800c1f09e45cb77136474e9165bad651ab4286159dfbc0f33fe4dd3d56699783a4e8093531039c74d1c143aaf71bbb518c69bfde659bd3c137500d2bc07652bd9f752e99c5729f12eab5ec82cfeb6566cf05eda2ab877a0a95cfe787b2a4a4caac71b2a7d4919720c136f7f62e5d5d8eba656b926c5d2c4dfe28bf92665957e26f7cbd8a4cd9828c3884a005510dd40d392ff745039fa099a102bf5d625062620007d5cf8ace6dc8df0bc29f0d7b8d7e618033e5fb952feda32c5cdf2d965df22ed59bb8f5d1bcee8dd90180f276b5219d0fe70010534a9036eb52fe1ea42a7d0d7bbb31455cdacfe1589c118da599a84ed1d7b0505012b4ec95314ec5f3748addfd0c276613fb3ac16c49c644204ffd9b80b13f6c0a0fc7ad33df435f9563b78cad1249ba2cdad20197d919d17d469580d1d6644dd89c72924ab509df578f34f1e2b202b386ff8506137ea86c92c915c8e6c0bc11e9cad1da7d8d108e87b235cedd88621c017694f3741a860bb86eb718446e19f6b38f370d06a9f6c44f2df51db6fb29ecd77a371008d7d8e259d4a98a6ef23a8f637071a65692ebd5c5ce783c16a89ff7ecb8d008b7aa53ac8ebefff2dc3dd613279c3cf1e768a2693361038ad72f850caa7911911f96dc22529f9b4ae5e3956ba2369a8a800536c38af685c6d2709ec360834aef5e2bc81cddcf7a915c99f4bb87eba47ddad51648fc0a3ed8b4f46b96fefa33e506ca049c7fc9aa69b29108fb37fe186a0c095658ef0c9d06c2bb7190c088ca393d0b822a22ee1bd25a5f2e896fb8445e601b809bf82f8bc0010bf753d0283fa5be7dd0b60d64a7455adb4f6fa1fa22b574fd33e64e9a5911d7e0a518c96b0119190ee2cb54d95d8854f3166ddcf4b689d0b160ff934c13af11899f1d9328510850b1a1128f90ba5edd9550c5b098b1871d34a85f4517741ea908b7ad2e865b3782e962d74b2c9d8e29c9442771f74e9ff04f5d0841595b61b5840267aa485d73f9dd870fc6c21b68f6799be228f8774a40b20d257a450f07f860307eee2e7f2f2a956634a7883fb5ce27842e73fa245daebb9e287f3fdf82671c24c32940bab03069d291d67a7bcf1c9afff0b6dc9d5031e5f7aaea71f87ff57b86eab8167bf17b9cfbdd1e0099acedd2cbc4db60bfb58c2b1a26449ffb979d8b947b543f99acea71993635a06e5d97c15c47668504c4e70d43c43a9842a4517241635aeccb9eff3b4154364c25d9c3175cbf28810834f86c6e782f0c55faaa9ead4338af064e52fa82ee3638ccf57585c767ba15caabbd6a80f8a1c4929d10d048d7b535aec4f5c5a13b185ad06adf652aa1780050d8b4a367ea8980fb7b069be555ae06fab2ba864b0576f8619fdfcf8ac5f6e155641df0a1c62dcbdfd2542056636c5018801229a4570a23cf7dfa22ff93ef6fc4c5b2166b3c032fc4565e5e2f60d74402ebf802581cd77f32bbb03d2f4c5f66429218e2d315f2da0542fe9197aa79d87dbcf71e084a4a75bcde638ae7391152a0fc06a26086d393d77c1d8c963c5826401dd15447f7f5bf31482192472c6708ad747200ba954074792341f3585b419a6a1b9efb99c39dd4f1f5456a7d79617346d7a855943050c342e88544a81d37e2ba35307a8681664adeb049c9181cfb8cfd6669e3868b0db208ddf17cd9979fe9bb79299e209e6d5919ed78603ffad1e7fb13c239abefc5617ca85b748df40c791979e7977ebcb3d709406e2d09b24a6480cb642b75ee518a9783297eed1dfe57f9b615cf033166d81abd67a4e6170c1de735b4ba78e96e8e327886b1d02e1a3a9757af24edb66890adfe2fa285916815e4032b450aa97632e0f83fc2a4d994bcda4c7f9fe2a9e81e32fbcc8a83c092e112ce7ef433829f598db53e9409c5578071db816ce7080f034995a3a1bb1a267c73fec96f8cc737d531a8645655607d11c8edde5492810fbc3395be41f41f27eefaabf1869684358654f770dc45359fdd74b264a422b240fa7030bb5119838de7a846605aa0db2161d27c3bee447c4c8529e7e80319cc2b7c1fa09f5dc4402c94be92866d526b36affd6b6fb9c39ad7ad86ea5f038dd22beb4b4fcfa833b68504ae11e6461fadb919d1a3df0b60426150b2e3b5e709ac171e801d08e0e69723c8f3b710a6b7a4f5f9753b8db08cab4caae2ecfb65f591443ee911ddb153482e7b134bfb170f7737540bb48a04f8239852d89e89665a7191e7d2b0c7ca989bcafa10f83d21661065b7e0871c12fde020bb6134e8135b4da66ec787e83e27e9252c5623e1fca8ea27d369a7e3c312825e39586bf1218c54367a90f1e59392b4c6bfb3d1d0b16a855b050f223755ec6de7a5abf1ba09d0d109f254b8825805568830d97b64d52b064618668dcd518d61a9de0579aab852969a62aa040e830abb84f9f9abe8a2986a30a49f6193e7a905ea96b04d8e2020f03038a532c5dd33251e2e752f4ff333eea57ed3d08477c56b994f49de8c6cd785e897ca1b7cf7286bcf6ec72cc74c72176e2fec7199e2887680ef321d45313514fe0fe6ed9bcdbb6e9347bea516a745bb02c0e734966ba55fb147f4fae369c3c34e409479e183c74298292e3cb9ff54ac0c396afc3fb4e886f3b4a026b73052ccf88075583bf229fa0e07e125ef610cb9cbe8d75e49b85c4223cc840548dfb3018ad5c1894a79547aa8423c83b0fbcaf2871762c0b48a7d3761910c3371b35b42a39df0dbbcbb167f4f0a641af5fd9c603a97b7934c8c2d6ce6fa0c6ae84bed3a099fae0a3f786bb3ee1dccdee9277f9a7bdc0b0e5a53e387dd4dd7d7f07b23a816643a5da397f6d0e4e532b1d424a466769520161f1b02c30282e0e9d372a584e915af8f21adfb43534185aa392d4808e7cb040609c17364e0f956af2fe1089d838dc07bcf5e32a51b3f81c88aa79c7bc4fb7b46a76f58931c1a221da8948961a64e00a6dcca122a645f59db40f3077cdd1fe4737541d638934b0cd423c3ab6bca8c5673dd164c1c4fe77bc0cd7ee548c66dbbf318c89d76a4e0e4ec8bd50250f8b4fab50fad007abd37087f1c5846fa55968a4b8e329cfcdd80d0b5ea0b6d6cda69d83a9b4d26383172994954d7d3c10a94151ceebaab473ab03f5c3e413b32def21f9fc1746552893d2dfe678136150d633791cd420ac9ed4689bdf0758ba6050ccde0a1fd08ba47812fa8995b008ead259661a38ff5ee7680d6ecbba505be68db4da27e14719b03dc0e45befe78eb9d4fa36ce0bf0f952158cb20528bc3d26b81cf0289147cf85eea953f51c84b393222ff646378541d3bcb8d0fe8bb97dca46a3e3123da9476b181497200ec833ed07a1e951e9225bb69ae3dd6382888f004a73b617aadbd95976a67d42095eb099ba70de066659cdcfb8204b1020293d358ad5b47b0d43730be6385fb93c1900511dff99120b50cb1b2a221fbe8d01b853afa006bdf45753515fbcd9aa53eb77996455607ef73d429fcd1994079b7a4cc417ffc510f18a4a94f2be62ecd3b0b071ba65069582db6991f0d3266ce1a92b0eaceec720b21ccb30c19ca3ab9cb7812bd77dd727b1f247a5b43c4916bf4adb41cadf1532cca0f44e8eaabccda48153046106e9a2eab7158850036e681ac28828b4b59d2d55c72fda2fe27b457d2263fae769019667c9c4a4636c285ba856061ad7c7092fc5a4948f27e8d51349d120e71d4804d5c269d9709927b2ce4a6616c548009403309e588fcff587703702160bb18bd4522ee02ae9eee1997b529337e9"}, 0x4200)

06:52:10 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
close(r0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0)

06:52:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
syz_open_pts(r1, 0x0)

06:52:10 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)

06:52:10 executing program 5:
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
close(r0)

06:52:10 executing program 4:
r0 = semget$private(0x0, 0x7, 0x0)
semctl$SEM_INFO(r0, 0x2, 0x10, 0x0)

06:52:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x5452, &(0x7f0000000040))

[ 1530.774741][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:10 executing program 2:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
writev(r0, 0x0, 0x0)

06:52:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$char_raw(r2, 0x0, 0x0)

06:52:10 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f0000000540))

06:52:10 executing program 3:
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2a0040, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0x5450, 0x0)

06:52:10 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
write$P9_RLOPEN(r0, 0x0, 0x0)

06:52:10 executing program 2:
r0 = inotify_init1(0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140))

06:52:10 executing program 0:
open$dir(&(0x7f0000000000)='./file0\x00', 0x5c49c3, 0x109)

06:52:10 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
dup2(r1, r0)
ioctl$KDMKTONE(r0, 0x541b, 0x20000007)

06:52:10 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/pid\x00')
fcntl$getownex(r0, 0x10, &(0x7f0000000780))

06:52:11 executing program 5:
r0 = eventfd(0x80008003)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RREADDIR(r2, &(0x7f0000000000)={0xb}, 0xb)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
close(r3)
socket(0x10, 0x2, 0x0)
dup2(r3, r2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:52:11 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES32], 0x14)
r2 = eventfd(0x80000000)
sendfile(r2, r1, &(0x7f00000001c0), 0x8808100000002)
close(r2)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
tkill(r0, 0x13)

06:52:11 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x77c}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71b1}, {0x4, 0x6}, {0x4, 0x4ba}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000005)
write$binfmt_elf64(r1, 0x0, 0x0)

06:52:11 executing program 2:
r0 = epoll_create(0x7ff)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8)

06:52:11 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14)
r2 = eventfd(0x80000000)
sendfile(r2, r1, &(0x7f00000001c0), 0x8808100000002)
close(r2)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
tkill(r0, 0x13)

06:52:11 executing program 1:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180))

06:52:11 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2040, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000))

06:52:11 executing program 1:
symlink(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
lsetxattr$security_ima(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:11 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x38de40, 0x150)

06:52:11 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES32], 0x14)
r2 = eventfd(0x80000000)
sendfile(r2, r1, &(0x7f00000001c0), 0x8808100000002)
close(r2)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
tkill(r0, 0x13)

[ 1531.094937][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:11 executing program 1:
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)

06:52:11 executing program 5:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

06:52:11 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x33}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1531.814411][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
sendmmsg$inet(r2, &(0x7f0000001200), 0x0, 0x0)

06:52:11 executing program 4:
r0 = open(&(0x7f0000000300)='./file0\x00', 0x480040, 0x0)
pipe2$9p(&(0x7f0000000380)={<r1=>0xffffffffffffffff}, 0x0)
dup3(r1, r0, 0x0)
r2 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0)
ioctl$TCSETSF2(r0, 0x541b, 0x0)

06:52:11 executing program 1:
r0 = epoll_create(0x317)
fadvise64(r0, 0x0, 0x0, 0x0)

06:52:11 executing program 3:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0x8903, &(0x7f00000002c0))

06:52:11 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5451, 0x0)

06:52:11 executing program 1:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

06:52:11 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0)

06:52:12 executing program 3:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50042, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)

06:52:12 executing program 0:
r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x200841, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000))

06:52:12 executing program 0:
r0 = eventfd(0xfffffffc)
write$char_usb(r0, &(0x7f0000000240)="c626793c4c01f78c", 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
tkill(r1, 0x1000000000016)

06:52:12 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a00)='statm\x00')
fstatfs(r0, &(0x7f0000000040)=""/127)

06:52:12 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
r4 = dup(r1)
ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0))
tkill(r0, 0x1000000000016)

06:52:12 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
close(r0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xa0)

06:52:12 executing program 3:
r0 = inotify_init()
fcntl$lock(r0, 0x2, 0x0)

06:52:12 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$CHAR_RAW_RAGET(r1, 0x5451, 0x0)

06:52:12 executing program 5:
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x42, 0x0)
write$P9_RREAD(r0, 0x0, 0x0)

06:52:12 executing program 0:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
fcntl$getown(r0, 0x9)

06:52:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0)
r1 = epoll_create1(0x0)
r2 = dup3(r0, r1, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)

06:52:12 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x77a}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}, {0x4, 0x6}, {0x4, 0x101}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:12 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
write$cgroup_type(r2, 0x0, 0x0)

06:52:12 executing program 2:
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0x20, &(0x7f0000000140))

06:52:12 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fsync(r0)

06:52:12 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000000)={'batadv_slave_0\x00'})

06:52:12 executing program 2:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:52:12 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r2, 0x0, 0x0)

06:52:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

06:52:12 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

06:52:12 executing program 5:
r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r0, &(0x7f0000000240), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0x2000000000feff)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:12 executing program 0:
r0 = memfd_create(&(0x7f00000001c0)='}+lo\x00', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0x10000)
link(&(0x7f0000000040)='./file0\x00', 0x0)

06:52:12 executing program 2:
clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

[ 1532.865993][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:13 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0)

06:52:13 executing program 3:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
statx(r1, &(0x7f00000006c0)='./file0\x00', 0x0, 0x400, &(0x7f0000000540))

06:52:13 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4(r0, 0x0, 0x0, 0x800)

06:52:13 executing program 1:
mount$9p_fd(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x7ecea38f5e02436f, 0x0)

06:52:13 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1\x00', 0xfffffffffffffd05)

06:52:13 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='auxv\x00')
ioctl$FS_IOC_SETVERSION(r0, 0x5452, &(0x7f0000000040))

06:52:13 executing program 4:
pipe2(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x5450, 0x0)

06:52:13 executing program 1:
r0 = gettid()
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40b8, 0x0)
r4 = dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x541b, 0x0)
ioctl$CHAR_RAW_SECTGET(r4, 0x1267, 0x0)
r5 = accept(0xffffffffffffffff, 0x0, 0x0)
setresgid(0xee00, 0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x2061)
write$P9_RVERSION(r6, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:52:13 executing program 3:
r0 = epoll_create(0x1)
fcntl$setsig(r0, 0x406, 0x0)

06:52:13 executing program 2:
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0)

06:52:13 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
ioctl$int_out(r1, 0x2000005452, 0x0)

06:52:13 executing program 5:
pipe2$9p(&(0x7f0000000100), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f0000000180)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x1c\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)

06:52:13 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f0000000080)=ANY=[@ANYBLOB="e214029d4831afe6d19efbac6f897400000000"])
statx(r0, &(0x7f00000003c0)='./file0\x00', 0x1000, 0xfff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f0000000140)=0x6e)
setresgid(0xee01, r2, 0xffffffffffffffff)
r3 = semget$private(0x0, 0x4, 0x200)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000540)=[0x2])
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/166)
semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000180)=""/156)
semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000400)=""/117)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x600, 0x61f96d357f19dc6a)
r5 = dup(r4)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000500))
semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000480)=""/110)
openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0)

06:52:13 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
ioctl$TIOCSCTTY(r1, 0x541b, 0x0)

06:52:13 executing program 3:
socket$unix(0x1, 0x0, 0x4)

06:52:13 executing program 2:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
dup2(r0, r1)
openat(r1, &(0x7f00000000c0)='.\x00', 0x0, 0x0)

06:52:13 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f0000000080)=ANY=[@ANYBLOB="e214029d4831afe6d19efbac6f897400000000"])
statx(r0, &(0x7f00000003c0)='./file0\x00', 0x1000, 0xfff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f0000000140)=0x6e)
setresgid(0xee01, r2, 0xffffffffffffffff)
r3 = semget$private(0x0, 0x4, 0x200)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000540)=[0x2])
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/166)
semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000180)=""/156)
semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000400)=""/117)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x600, 0x61f96d357f19dc6a)
r5 = dup(r4)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000500))
semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000480)=""/110)
openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0)

06:52:13 executing program 3:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

06:52:13 executing program 2:
r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x3}})

[ 1533.894493][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1534.134316][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1534.944443][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.984496][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:16 executing program 1:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syncfs(r0)

06:52:16 executing program 5:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
dup2(r2, r1)
lseek(r1, 0x0, 0x0)

06:52:16 executing program 3:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
dup2(r1, r0)
ioctl$KDSKBMETA(r0, 0x541b, 0x0)

06:52:16 executing program 2:
r0 = socket(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x4, 0xffffffffffffffff)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

06:52:16 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x402040, 0x0)
r1 = dup(r0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

06:52:16 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8901, &(0x7f0000000100))

06:52:16 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x5a52fa5207248a7c, 0x0)
fsetxattr(r0, &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0)
r1 = dup2(r0, r0)
fremovexattr(r1, &(0x7f0000000040)=@known='user.syz\x00')

06:52:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
shutdown(r1, 0x0)

06:52:16 executing program 1:
r0 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

06:52:16 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

06:52:16 executing program 0:
r0 = eventfd2(0x0, 0x800)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="e04a4f74b80de1fa", 0x8}], 0x1)
write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "68e26abe"}, 0x8)

06:52:16 executing program 2:
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4b9e42, 0x0)
write$P9_RVERSION(r0, 0x0, 0x0)

06:52:16 executing program 5:
symlink(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x4)

06:52:16 executing program 1:
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLCREATE(r0, &(0x7f0000000040)={0x5c2}, 0x0)

06:52:16 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000080)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0)

06:52:16 executing program 3:
pipe(&(0x7f0000001800)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RREADDIR(r0, &(0x7f0000000000)={0x68, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x3b9, './file0'}]}}, 0x0)

06:52:16 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
write$P9_RXATTRWALK(r0, 0x0, 0x0)

06:52:16 executing program 0:
clock_nanosleep(0x0, 0x3, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0))

06:52:16 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0)

06:52:16 executing program 3:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$P9_RFLUSH(r1, &(0x7f0000000440)={0x7}, 0x0)

06:52:16 executing program 2:
setrlimit(0x7, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)

06:52:16 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}, {0x4, 0x86}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:16 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
getsockname$unix(r0, 0x0, &(0x7f0000000180))

06:52:16 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KDFONTOP_COPY(r2, 0x541b, 0x0)

06:52:16 executing program 5:
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="979266dedc556be6", 0x8}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x0, 0x7ff}, 0xb)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
close(r2)
signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
tkill(r1, 0x1000000000016)

06:52:16 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
fchmod(r0, 0x40)

06:52:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=@nl, 0x719000)

06:52:16 executing program 0:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)
r2 = epoll_create(0x10001)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r3=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000140))
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

06:52:16 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$FITRIM(r0, 0x5452, &(0x7f0000000080))

06:52:16 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RLOPEN(r0, 0x0, 0x0)

06:52:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fa466355b9ea2f1, 0x0)
write$P9_RFSYNC(r0, 0x0, 0x0)

06:52:16 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/full\x00', 0x0, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0x5451, 0x0)

06:52:16 executing program 1:
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x5)

[ 1536.621456][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1537.024966][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1537.174322][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:17 executing program 4:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = memfd_create(&(0x7f0000000080)='procppp1eth1{}(cpusetcgroup\r{\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r1, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0x10000)
tkill(r0, 0x1000000000016)

06:52:17 executing program 3:
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:52:17 executing program 0:
r0 = socket(0x1, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x5452, 0x0)

06:52:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0)

06:52:17 executing program 5:
unlink(0x0)
link(&(0x7f0000000380)='./file0\x00', &(0x7f00000007c0)='./file1/file0\x00')

06:52:17 executing program 2:
setxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

06:52:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000100), 0x0, 0x20001000, 0x0, 0x0)

06:52:17 executing program 1:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0)

06:52:17 executing program 0:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x541b, 0x0)

06:52:17 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x182601, 0x0)
fallocate(r0, 0x0, 0x0, 0x5)

06:52:17 executing program 5:
r0 = socket(0x10, 0x800000000080003, 0x0)
ioctl$FITRIM(r0, 0x5452, &(0x7f0000000080))

06:52:17 executing program 1:
add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x0, 0x59fe43)

06:52:17 executing program 4:
r0 = socket(0x1, 0x1, 0x0)
fstatfs(r0, &(0x7f0000000000)=""/255)

06:52:17 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100)

06:52:17 executing program 1:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000240))

06:52:17 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0)
write$P9_RLOCK(r0, 0x0, 0x0)

06:52:17 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5450, 0x0)

[ 1538.064383][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:18 executing program 2:
r0 = inotify_init1(0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f0000000140))

06:52:18 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r0, &(0x7f0000000000)='z', 0x1, 0x0, 0x0, 0x0)

06:52:18 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x5451, 0x0)

06:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmmsg$inet(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000080), 0x1}}], 0x400003e, 0x0)

06:52:18 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x80005)
splice(r0, 0x0, r1, 0x0, 0x62ce9f1, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)

06:52:18 executing program 4:
r0 = inotify_init()
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup2(r1, r0)
write$P9_RLCREATE(r2, 0x0, 0x0)

06:52:18 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0)

06:52:18 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
accept$unix(r0, 0x0, 0x0)

06:52:18 executing program 0:
r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0)
futimesat(r0, 0x0, 0x0)

06:52:18 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040), 0x2, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x3, 0x0)

06:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmmsg$inet(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000080), 0x1}}], 0x400003e, 0x0)

06:52:18 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
ioctl$sock_SIOCINQ(r0, 0x5450, 0x0)

06:52:18 executing program 3:
r0 = socket(0x1, 0x5, 0x0)
r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
dup2(r0, r1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000040)=0xc)

06:52:18 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x608043, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)

[ 1538.422843][   T28] audit: type=1804 audit(1601275938.429:314): pid=27572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16242 res=1 errno=0
06:52:18 executing program 5:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getdents(r0, &(0x7f0000000180)=""/208, 0xd0)

06:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmmsg$inet(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000080), 0x1}}], 0x400003e, 0x0)

06:52:18 executing program 4:
r0 = creat(&(0x7f00000017c0)='./file0\x00', 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000001840))

06:52:18 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2002, 0x0)
write$binfmt_script(r0, 0x0, 0xe7)

06:52:18 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = dup2(r0, r1)
ioctl$TIOCSPTLCK(r2, 0x541b, 0x0)

06:52:18 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
writev(r1, 0x0, 0x0)

[ 1538.465486][   T28] audit: type=1804 audit(1601275938.459:315): pid=27572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16242 res=1 errno=0
06:52:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_pts(r0, 0x20c1)

06:52:18 executing program 0:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x0, 0xa)

06:52:18 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00')
write$nbd(r0, 0x0, 0xbd)

06:52:18 executing program 1:
r0 = semget$private(0x0, 0x1, 0x80)
r1 = epoll_create1(0x80000)
shutdown(0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x20, 0x4, 0x5})
r2 = socket$unix(0x1, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000400))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpeername(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x7f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x7f)
getsockname(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x80)
write$P9_RGETATTR(r5, 0x0, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x4)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x0)
setreuid(0x0, r6)
geteuid()
shmctl$SHM_UNLOCK(r0, 0xc)

06:52:18 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}, {0x4, 0x6}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x5}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:18 executing program 2:
semget(0x3, 0x1, 0x255)

06:52:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$P9_RMKDIR(r0, 0x0, 0x0)

06:52:18 executing program 4:
setrlimit(0x9, &(0x7f00000001c0))
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)

06:52:18 executing program 0:
lstat(&(0x7f00000002c0)='.\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6, &(0x7f00000000c0)=0x80)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x0, 0x2a69c2)

06:52:18 executing program 1:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
dup2(r1, r0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x27, &(0x7f0000000100), &(0x7f0000000040)=0x4)

06:52:18 executing program 2:
r0 = socket(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x4, 0xffffffffffffffff)
fchmod(r1, 0x0)

06:52:18 executing program 0:
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400000002c2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000200)=0x80)
sendfile(r2, r0, 0x0, 0x0)

06:52:18 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
ioctl$TIOCCONS(r0, 0x5451)

06:52:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x197443, 0x2)
write$P9_RRENAME(r0, 0x0, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13)
socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
pipe2$9p(&(0x7f0000000040), 0x5000)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x193042, 0x0)
write$P9_RRENAME(r3, 0x0, 0x0)
fdatasync(r3)
preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/164, 0xa4}], 0x6, 0x2, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000740)={0x14, 0x11, 0x2, {0x4, 0x3, 0x2}}, 0x14)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0x541b, &(0x7f0000000000)={0x0, <r5=>0x0})
capget(&(0x7f00000000c0)={0x19980330, r5}, &(0x7f00000001c0))
sched_getscheduler(r5)
r6 = semget$private(0x0, 0x1, 0x80)
shmctl$SHM_UNLOCK(r6, 0xc)

06:52:18 executing program 4:
r0 = socket$unix(0x1, 0x1000000000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)

06:52:18 executing program 0:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt(r1, 0x0, 0x0, 0x0, 0x0)

[ 1539.094423][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:19 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002440), 0x8, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x5451, 0x0)

06:52:19 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:19 executing program 2:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', 0x0, 0x0, 0x0)

06:52:19 executing program 1:
r0 = memfd_create(&(0x7f00000004c0)='}+lo\x00uMH\xf2}\x9fMY}\t\xfd\xc2\xab\xdf\x01N\xcc:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xd79&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89VsV\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xdf\\\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v', 0x0)
r1 = dup(r0)
write$cgroup_int(r1, 0x0, 0xfffffe74)

06:52:19 executing program 0:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
dup3(r2, r0, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

06:52:19 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setreuid(0x0, r0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)

06:52:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f000000c840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa4}}], 0x1, 0x0)

06:52:19 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r0)
write$cgroup_pid(r1, 0x0, 0x0)

06:52:19 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
write$cgroup_int(r2, &(0x7f0000000380), 0xffffff8d)
sendmmsg$inet(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='x', 0x1}], 0x1}}], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000016)

06:52:19 executing program 3:
r0 = eventfd(0xdffffffe)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
write$cgroup_int(r0, &(0x7f0000000040), 0x12)
close(r0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='maps\x00')
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:52:19 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x240001, 0x0)
write$binfmt_script(r0, 0x0, 0x0)

06:52:19 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0)
futimesat(r0, 0x0, 0x0)

06:52:19 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

06:52:19 executing program 0:
semget(0x2, 0x3, 0x286)

[ 1539.635041][   T28] audit: type=1804 audit(1601275939.649:316): pid=27673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16235 res=1 errno=0
06:52:19 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x1, 0x0)
write$eventfd(r0, 0x0, 0x0)

06:52:19 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

06:52:19 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={<r1=>0x0}, &(0x7f00000001c0)=0xc)
setpriority(0x0, r1, 0x0)

06:52:19 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r2)
syz_open_procfs(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
eventfd2(0x0, 0x80000)
gettid()
utimes(0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @identifier="ee9002a6da8869161842ebc0404569c8"}})

06:52:19 executing program 5:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCSETSW(r1, 0x5450, 0x0)

06:52:19 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)

[ 1539.677853][   T28] audit: type=1804 audit(1601275939.689:317): pid=27674 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16235 res=1 errno=0
[ 1540.144423][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1540.215862][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:20 executing program 4:
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0))

06:52:20 executing program 1:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x5450, 0x0)

06:52:20 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x463c43, 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

06:52:20 executing program 5:
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f0000000040))

06:52:20 executing program 2:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RRENAMEAT(r0, 0x0, 0x0)

06:52:20 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RFLUSH(r1, &(0x7f0000000040), 0xffffff7e)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
dup2(r1, r0)

06:52:20 executing program 2:
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))

06:52:20 executing program 5:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
write$P9_RCLUNK(r2, 0x0, 0x0)

06:52:20 executing program 4:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffff9]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
splice(r0, 0x0, r1, 0x0, 0x7, 0x0)

06:52:20 executing program 0:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x2b)

06:52:20 executing program 1:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_int(r0, 0x0, 0x0)

06:52:20 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = open(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x5451, 0x0)

06:52:20 executing program 0:
r0 = semget(0x3, 0x0, 0x0)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000380)=""/108)

06:52:20 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = dup3(r0, r1, 0x0)
write$binfmt_elf32(r2, 0x0, 0x0)

06:52:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$P9_RXATTRCREATE(r0, 0x0, 0x0)

[ 1540.548915][   T28] audit: type=1804 audit(1601275940.559:318): pid=27724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16233 res=1 errno=0
06:52:20 executing program 1:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = inotify_init1(0x0)
dup2(r1, r0)
ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000040))

06:52:20 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2040, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x5450, 0x0)

06:52:20 executing program 0:

06:52:20 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETA(r2, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0680080600"})

06:52:20 executing program 2:
semctl$GETALL(0x0, 0x0, 0x10, &(0x7f00000001c0)=""/129)

[ 1540.600726][   T28] audit: type=1804 audit(1601275940.569:319): pid=27724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16233 res=1 errno=0
[ 1541.174461][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:21 executing program 4:
r0 = eventfd2(0x0, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0)

06:52:21 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x444180, 0x54)

06:52:21 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
close(r0)
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x48, 0x0)

06:52:21 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
flistxattr(r1, 0x0, 0x0)

06:52:21 executing program 2:
r0 = eventfd(0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))

06:52:21 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40), 0x0, 0x40000000, 0x0)

06:52:21 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
write$binfmt_misc(r1, 0x0, 0x0)

06:52:21 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x882, 0x0)
write$P9_RSETATTR(r0, 0x0, 0x0)

06:52:21 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)

06:52:21 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$getflags(r0, 0x0)

06:52:21 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000140)=0x1a5)
close(r1)
memfd_create(&(0x7f0000000540)='GPL[\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
pread64(r3, 0x0, 0x0, 0x0)

06:52:21 executing program 1:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = dup2(r0, r1)
ioctl$TIOCL_PASTESEL(r2, 0x541b, &(0x7f0000000000))

06:52:21 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00')
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5451, 0x0)

06:52:21 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x77c}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71b1}, {0x4, 0x4ba}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:21 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x1}, {0x4, 0x71b1}], 0x2)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x6}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:21 executing program 1:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x188ea703a3c199d1, 0x0)
write$P9_RRENAMEAT(r0, &(0x7f0000000240)={0x3e5}, 0xfffffe7d)

06:52:21 executing program 1:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setgid(r0)

06:52:21 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8902, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_flags})

06:52:21 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080))

06:52:21 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8901, &(0x7f00000001c0)={0x2, 'veth1_to_bridge\x00'})

06:52:21 executing program 4:
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
write$P9_ROPEN(r1, 0x0, 0x0)

06:52:21 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000001cc0), 0x1000000000000268}}], 0x1, 0x0)

[ 1542.214500][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:22 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
dup3(r1, r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:52:22 executing program 3:
r0 = getuid()
r1 = socket(0x4000000000010, 0x1000000000080002, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lchown(&(0x7f0000000040)='.\x00', r0, r2)

06:52:22 executing program 5:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
utimes(&(0x7f0000000080)='./file0\x00', 0x0)

06:52:22 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFCONF(r0, 0x5450, 0x0)

06:52:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
r3 = fcntl$dupfd(r1, 0x0, r2)
renameat(r0, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00')

06:52:22 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x78df}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0xff}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:22 executing program 5:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setreuid(0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x13)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x6, 0x0)

06:52:22 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5452, &(0x7f0000000300)={{}, 0x0, 0x0, @unused, @devid})

06:52:22 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0)

06:52:22 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_read_part_table(0xfffffffffffffc01, 0x1, &(0x7f0000001840)=[{0x0}])

06:52:22 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/full\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5451, 0x0)

06:52:22 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5421, 0x8093dc)

06:52:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = open(&(0x7f0000001080)='./file0\x00', 0x40040, 0x0)
dup3(r0, r1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:22 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x8)

06:52:22 executing program 2:
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x5451, 0x0)

06:52:22 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$binfmt_misc(r1, 0x0, 0x0)

06:52:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00')
ioctl$TIOCOUTQ(r0, 0x5411, 0x0)

06:52:23 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RXATTRWALK(r0, 0x0, 0x0)

06:52:23 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
r2 = dup3(r0, r1, 0x0)
sendmmsg$sock(r2, &(0x7f00000015c0)=[{{0xffffffffffffffff, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)="99", 0xfffffe5a}], 0x1}}], 0x1, 0x0)

06:52:23 executing program 5:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
fchmod(r0, 0x0)

06:52:23 executing program 2:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x5450, 0x0)

06:52:23 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
write$char_usb(r2, 0x0, 0x0)

06:52:23 executing program 2:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
rmdir(&(0x7f0000000100)='./file0/file0\x00')

[ 1543.254898][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1543.265008][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1543.275028][   T28] audit: type=1804 audit(1601275943.289:320): pid=27857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file1" dev="sda1" ino=16259 res=1 errno=0
06:52:23 executing program 2:
r0 = memfd_create(&(0x7f00000004c0)='}+lo\x00uMH\xf2}\x9fMY}\t\xfd\xc2\xab\xdf\x01N\xcc:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xd79&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89VsV\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xdf\\\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v', 0x0)
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$P9_RREAD(r2, 0x0, 0x0)

06:52:23 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

06:52:23 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = dup2(r0, r1)
fchown(r2, 0x0, 0xee00)

06:52:23 executing program 1:
r0 = eventfd2(0xfff, 0x0)
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000300)='syz0\x00', 0x1ff)
r2 = dup(r1)
r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000300)='syz0\x00', 0x1ff)
close(r3)
r4 = semget$private(0x0, 0x1, 0x80)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000000)=""/190)
shmctl$SHM_UNLOCK(r4, 0xc)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$P9_RATTACH(r5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f00000001c0)={0x6, 0x70, 0x3f, 0x3, 0xff, 0x7, 0x0, 0x8001, 0x46330, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0xdd}, 0x42, 0x243f9c36, 0x1, 0x0, 0x2ee7, 0xfffffffc, 0x3}, 0x0, 0x6, r5, 0x1)
r7 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000300)='syz0\x00', 0x1ff)
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x60}, {0xffffffffffffffff, 0x8}, {r6, 0x1}, {r7, 0x440}, {r3, 0x250e}], 0x5, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0x8]}, 0x8)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc)
semctl$SEM_STAT_ANY(r4, 0x1, 0x14, &(0x7f0000000280)=""/95)
semctl$GETZCNT(r4, 0x2, 0xf, &(0x7f0000001080)=""/4096)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8904, &(0x7f0000000e40)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15cC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbu^\"y\xff\xbf<>Y\x1a\xfc\xda\xb6\t\xe7\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x86\x90\xea+\xe5\xa8\xf8\xf8\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp4>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x01&\xb1\xf3\xff0\f\x8a%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\f\x02P\xc3!~\xc7\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89`\xa8O\xca\x00\x00\x00\x00\x00\xeb7\x14=\xba{\xf7\x16\b\xd3\xba\xb2\xff\xb0\xe4\x8f\xee\xf2\xa9\xdc\x8e\xea\xa88\x9c\x12zY\xe91\x84\xe16Z\xb9\xf4\x89p\xdf%\bK`n\xff\a\x00\x00\xf3\x16\xae<\x00\xe2p\x8d\x8c\xad\xe2\xfd\x91\xaa}`\x88\'\x8f\x14\xda\x8d\xbaBwF\x81\xeeU\xb6\xa1\x98j\x1e\xd3x\x97X\xd8\x89\xc09\xaeQb\x18\x02M\xa8\x9bi\x87\xe1\x04\xfd\xd9\xce\x11\xf0\x83\xf1Sg_G\xb4\xbd\x93 \xe0\xd7P\xff\x0f\xe5Q\xee\x0f\xab\x00\xeb0\x19tlQ\xe3\xacy\x04\xb3\x00'/565)

[ 1543.316064][   T28] audit: type=1804 audit(1601275943.289:321): pid=27859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file1" dev="sda1" ino=16259 res=1 errno=0
06:52:23 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000740))

06:52:23 executing program 2:
open$dir(&(0x7f00000000c0)='./file0\x00', 0x204c0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x40, &(0x7f0000000100))

06:52:23 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x7bf3}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:23 executing program 1:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
syz_open_procfs(0x0, &(0x7f0000001580)='fd/3\x00')
r3 = gettid()
tkill(r3, 0x1000000000016)

06:52:23 executing program 5:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfffffe3d)
sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002)
r1 = dup(r0)
pread64(r1, &(0x7f00000002c0)=""/77, 0x4d, 0x0)

06:52:23 executing program 3:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file1\x00')

06:52:23 executing program 4:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280))

06:52:23 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80a40, 0x0)
ioctl$TIOCGPGRP(r0, 0x5450, 0x0)

06:52:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x193042, 0x0)
write$P9_RREMOVE(r0, 0x0, 0x0)

06:52:23 executing program 4:
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RRENAME(r0, &(0x7f0000000140)={0x47cf}, 0x0)

06:52:23 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x5450, 0x0)

06:52:23 executing program 2:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x5452, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @multicast1}})

06:52:23 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
writev(r2, 0x0, 0x0)

06:52:23 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5450, 0x0)

[ 1543.838470][   T28] audit: type=1800 audit(1601275943.849:322): pid=27897 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16254 res=0 errno=0
06:52:24 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x26e1, 0x0)
write$cgroup_int(r0, 0x0, 0xffffffffffffffb6)

06:52:24 executing program 5:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup3(r2, r0, 0x0)
write$P9_RSETATTR(r1, 0x0, 0x0)

06:52:24 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x12040, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$VT_RESIZEX(r2, 0x541b, &(0x7f0000000100))

06:52:24 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x0)
flistxattr(r2, 0x0, 0x0)

06:52:24 executing program 3:
r0 = semget$private(0x0, 0x6, 0x0)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:24 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200, 0x0)

06:52:24 executing program 2:
open(&(0x7f0000000000)='./file0\x00', 0x6947, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/46)

06:52:24 executing program 0:
r0 = timerfd_create(0x0, 0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

06:52:24 executing program 3:
setrlimit(0x7, &(0x7f0000000040))
open$dir(&(0x7f0000000200)='./file0\x00', 0x20001fb, 0x0)

06:52:24 executing program 4:
mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)

[ 1544.294365][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
r1 = dup(r0)
flock(r1, 0x8)

06:52:24 executing program 2:
signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000c00)='fd/4\x00')
fsetxattr(r0, &(0x7f0000000c40)=@random={'user.', 'self\x00'}, 0x0, 0x0, 0x0)

[ 1544.386568][   T28] audit: type=1800 audit(1601275944.399:323): pid=27936 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16279 res=0 errno=0
06:52:24 executing program 0:
r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x0)
ftruncate(r0, 0x0)

06:52:24 executing program 3:
r0 = eventfd(0x0)
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000000ed"], 0x8)
r1 = gettid()
write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0', "101ddcfe"}, 0x8)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timerfd_create(0x0, 0x0)
tkill(r1, 0x13)

06:52:24 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
r2 = dup2(r0, r1)
ioctl$sock_proto_private(r2, 0x5451, 0x0)

06:52:24 executing program 4:
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$int_out(r0, 0x8903, &(0x7f0000000000))

06:52:24 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
utime(&(0x7f0000000040)='./file0\x00', 0x0)

06:52:24 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
ioctl$GIO_UNISCRNMAP(r0, 0x5451, 0x0)

[ 1544.430587][   T28] audit: type=1800 audit(1601275944.399:324): pid=27936 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16279 res=0 errno=0
06:52:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x10, 0xffffffffffffffff)

06:52:24 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r2 = dup2(r1, r0)
ioctl$KDSIGACCEPT(r2, 0x5421, 0x840449)

06:52:24 executing program 2:
r0 = memfd_create(&(0x7f00000004c0)='*\x00', 0x3)
fcntl$addseals(r0, 0x409, 0x5)
r1 = dup2(r0, r0)
write$P9_RWALK(r1, &(0x7f0000000080)={0x3d, 0x6f, 0x0, {0x13b13b13b13b14e6}}, 0x8)

06:52:24 executing program 3:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$9p(r1, &(0x7f0000000380)="709ad523b2b193efd099e5bc7bca78eb09823e29aefad1d2ec6c282dc5000cd90e461a2844c56b8e314c544aef4b30ee48def8e8c98a9628520247a429efeacf0536f12995261356d5d735708f310c3ed429c083248abb9c81bec738bcbc17e5695d2ebfcffd159316083aa5fb8220e9e980625e15531b508b6a3f74850c43b16262047849e17c0d65c82b983f03f42166282b6de5f2e9f03eec0f4d197d74dcd651dd89200b9352076897bd33d5ff1676cb9c02782b709aad7570d0fe5bce5ec4fec621c19e1cf4", 0xffffff6a)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18)
dup3(r2, r0, 0x0)

06:52:24 executing program 0:
r0 = socket(0x10, 0x802, 0x0)
sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80, 0x0}}], 0x1, 0x0)

06:52:24 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xb15b7a4d4ddd103a, r1, 0x0)

06:52:24 executing program 0:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r1 = getuid()
setreuid(0xee00, r1)
fchmodat(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0)

06:52:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$P9_RAUTH(r2, 0x0, 0x0)

06:52:24 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)

06:52:24 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0)
r1 = inotify_init()
ioctl$TIOCPKT(r1, 0x5452, 0x0)

06:52:24 executing program 1:
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setreuid(0x0, r0)
setreuid(0xee00, 0x0)

06:52:24 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='maps\x00')
write$P9_RSYMLINK(r0, 0x0, 0x0)

06:52:24 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8933, 0x0)

06:52:24 executing program 2:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0], 0x14)
sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

06:52:24 executing program 3:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000002940)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000002840)="1dbbd99fb86a1ddba79a32003f367a5e629802e3cc8d9011c76c5b1dc564d8ac682e5260d64719fb5c1a2045e91658c6ee0c715fef8aa8e0dc3a1f1c7a2948c69779709931f4e1733e3b3bc55cc6e240ec86c8e37be54a801a459f4fca3140d27f7db0881d3e20cf54051bd6b781ae858b97c92d6c5678e7303f245f26875204e35357b9ef59ecb3ea42755a468d0c6e8d64b83cb351e7cdcdcfb9faa3a68849a9ad93f742ae263657332cb1600a3b010ce66ad1243449088c7514c7fcfb00ff83852edb63bc4af9143291782da09586cec21f71746a96031ff787e28677b0de75a32affa01d29cb97049d9599ed1d9319b7", 0xf2}, {&(0x7f0000002700)="585f92e431705f85e817ae3b1d9ada7e7c84102cede31bfbcb7d1d80d599cbe7222726b02f6b208f92588669e1db886e3681049a3cbfd2644f3450d30a5cd6ba8b51d4e6311e7d65d96a540b4971e3153176852d37d324f8874923e3be30401c62fd1600d1cf648cb57a12fdcb44122c0b753fa7b73f9e81232ebc939f3ae3a05204f4721f77d5dd0265103cf948abd393e920b93914783a8ba08914f9ac85c28f503d9cd8425c09a4c77535516dafe347bf4980a1cb8b575891923618cd3a6c348423522648790ede19b876057262faacaefd47e1f5c41363d37bf19c81e48b01753c3ece57fb0e95ee7da0e75ed8df2769f43a24265f5f525248750b3a036d4efd5e6a6f2ea20eab05bb7a9d0aaf2191c75f5506f67b6e", 0x118}, {&(0x7f0000001380)="e54eff2480608adb16ba4c35ee1e41a8071f7d44b2fdfd0bc2c87f4c120545d39c421860130cf76f67c4d160e91deb74e7cf23295c494b355d12f8ac22ff30728905da0136dcf92d2dfee21d29a362c769934d38df278408ea3c63fded6768896a6830b4bb952aa96b0ea519428e35cb53183c1273967feec5200120e05d20ca4cef37546f5fedf2", 0x88}, {&(0x7f00000001c0)="3a50e4556b739a7f9128b1acaebf05c2b0072f7d3b21adf35ff0bd2e5b480fa362fc53178bfeab7d899d1e72ca5d3d5f2e8727118006545f70e035933e1d054e", 0x40}, {&(0x7f0000002680)="138a4045e63119286bbd62b79675d6eafd02421701cca25bfe0ef5cefc8e452a5eac5e7a67debc5de9aa393da5b033d20e9b0613dcaaffae119fbc1d3dab03d5722a6091b72d77e137d1f511", 0x4c}, {&(0x7f0000000200)}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="9da2e3e4d078d8a3935cbdfe305315ac55483619e7c1dcab26369cb1899196387e1f48b6e05203d0db2af01b890f45d5b930e7ba8da3cb9f252b9b5e8b118ca5a8cfca8196f7a2e2a4546eb01145c27c23852c97ed63462e7dea78e8377a3fa8ef55e4ac6a2d9cd1ef1f928b9cc6e933e15d4fd0401c44a0fa04aa8294f1b08e6cf49fe6124aa463faf71efab824842cb1dc296a0ae38a60b6fea93307b4116957a83c22a673b55c3261e8e29b9131056265fbaff4b688944bf1a9571724a2636c289b63198c77a1562ddfaad92650a732194ed4ddbf9f4c15bb7f5dfdd94a", 0xdf}, {&(0x7f0000001280)="259c01b74770cce3aef08b5b61051fa21d3217f3fa8f253185ec1f60c76068f6e0ae8a60e79561c700fd47ce71507ce5817dd864e331a6b399c13dd6c440a59aa634d45670499b8ecb6be822880f36c452fa76cb4bb170ab3736a6b6da6f661300c8aafe6353903ec168aecaaba39b15e479a057d68b5f5ed5994c19426386f4fc245fd4de7f7fd2ab29f93b7662aff170cdc9f28353a63bf5ce5715329f38e21e8831496087d9782e4333ab8a5c439f51bfb5f190c54e142d", 0xb9}], 0xa, 0x587, 0x0)
r1 = inotify_init()
ioctl$FS_IOC_MEASURE_VERITY(r1, 0x8903, &(0x7f0000000080))
inotify_init1(0x80800)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
fcntl$setlease(r3, 0x4, 0x0)
fsetxattr$security_capability(r3, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10000}]}, 0xc, 0x0)
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="09000000d620410000009acf005989566af80d926aa27ea1ba9da41a0d1b022849f2446b1b5502f3585f6e7f766cfa199c53253cc73acc9f9cc2f8caff10e47a583aa9b42c95ba52f90000"])
r4 = semget$private(0x0, 0x4, 0x10)
semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000240)=""/27)
shmctl$SHM_LOCK(r4, 0xb)
semctl$GETNCNT(r4, 0x1, 0xe, &(0x7f0000000000)=""/15)
ioctl$RNDZAPENTCNT(r0, 0x5452, &(0x7f0000000080))
r5 = request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='/dev/urandom\x00', 0x0)
keyctl$instantiate(0xc, r5, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000200)='+bdevem0\'{\x00', &(0x7f0000001340))
prctl$PR_GET_CHILD_SUBREAPER(0x25)

06:52:24 executing program 1:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00')

06:52:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername(r1, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80)
dup3(r0, r2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
connect$netlink(r4, &(0x7f0000000000), 0xc)

06:52:24 executing program 0:
linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0)

06:52:24 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1}}], 0x1, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00')
dup2(r2, r1)

06:52:24 executing program 3:
mount(0x0, 0x0, 0x0, 0x0, 0x0)

06:52:24 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@timestamping={{0x14}}], 0x18}, 0x0)

06:52:24 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x200001, 0x0)
write$9p(r0, 0x0, 0x0)

06:52:24 executing program 3:
io_setup(0x0, &(0x7f0000000380)=<r0=>0x0)
io_getevents(r0, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x0)
io_destroy(r0)

06:52:25 executing program 5:
get_mempolicy(0x0, &(0x7f00000000c0), 0x7, &(0x7f00004f6000/0x1000)=nil, 0x2)

06:52:25 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r1, &(0x7f0000000100), 0x8)
sendfile(r1, r1, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x0, 0x12, r1, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
tkill(r0, 0x13)

[ 1545.334384][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:25 executing program 2:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x551840, 0x0)
setxattr$security_evm(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
readv(r1, 0x0, 0x0)

06:52:25 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

06:52:25 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)

06:52:25 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0xff8)
chdir(&(0x7f00000000c0)='./file0\x00')

06:52:25 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='statm\x00')
write$9p(r0, 0x0, 0x0)

06:52:25 executing program 1:
mknod(&(0x7f0000002e40)='./file0\x00', 0x0, 0x0)
r0 = getgid()
lchown(&(0x7f0000002ec0)='./file0\x00', 0x0, r0)

06:52:25 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0)

06:52:25 executing program 2:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x40, &(0x7f0000000040))

06:52:25 executing program 2:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='sysfs\x00', 0x808002, 0x0)

06:52:25 executing program 3:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)

06:52:25 executing program 0:
open$dir(&(0x7f0000000100)='./file0\x00', 0x865a2e1503e82278, 0xc0)

06:52:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
write$P9_RLERRORu(r0, 0x0, 0xc)

06:52:25 executing program 3:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = dup(r0)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x100)

06:52:25 executing program 2:
r0 = timerfd_create(0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0)

06:52:25 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
fchown(r0, 0x0, 0x0)

06:52:25 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001140)={<r1=>0x0}, &(0x7f00000011c0)=0x25)
sched_getscheduler(r1)

06:52:26 executing program 5:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x5452, &(0x7f0000006480)={'team_slave_0\x00'})

06:52:26 executing program 2:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x8, &(0x7f0000000140))

06:52:26 executing program 3:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000280)=""/4096, 0x1000)

06:52:26 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, 0x0)

06:52:26 executing program 0:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0)

06:52:26 executing program 4:
memfd_create(&(0x7f00000000c0)='bdev\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)

06:52:26 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400)='/dev/full\x00', 0x401201, 0x0)
write(r0, 0x0, 0x0)

[ 1545.967409][   T28] audit: type=1804 audit(1601275945.979:325): pid=28078 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16258 res=1 errno=0
[ 1545.989551][   T28] audit: type=1804 audit(1601275945.979:326): pid=28080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16258 res=1 errno=0
06:52:26 executing program 3:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
splice(r0, 0x0, r1, 0x0, 0x0, 0x0)

06:52:26 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00')
readv(r0, 0x0, 0x0)

06:52:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
write$cgroup_freezer_state(r1, 0x0, 0x0)

06:52:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
write$binfmt_aout(r0, 0x0, 0x15cf0d84ef70a31)

06:52:26 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, 0x0, 0x0)

06:52:26 executing program 5:
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000000), 0x48, 0x0, 0x0, 0x27e)

06:52:26 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
dup3(r0, r1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e)
sendto$unix(r1, &(0x7f0000000180), 0x0, 0x4000, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e)

06:52:26 executing program 3:
prlimit64(0x0, 0x0, 0x0, 0xfffffffffffffffd)

06:52:26 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1c1807, 0x0)
write$cgroup_freezer_state(r0, 0x0, 0x0)

06:52:26 executing program 1:
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setreuid(0x0, r0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)

06:52:26 executing program 2:
pipe2$9p(&(0x7f0000003b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

06:52:26 executing program 0:
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)

06:52:26 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
waitid(0x2, 0x0, &(0x7f0000000000), 0x20000000, &(0x7f0000000180))
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0)

06:52:26 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
fcntl$notify(r0, 0x0, 0x0)

06:52:26 executing program 1:
r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
write$cgroup_pid(r0, &(0x7f0000000040), 0x12)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000140), 0xa601)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[ 1546.224362][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:26 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000540))

06:52:26 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x78df}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x40}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1546.295123][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:26 executing program 5:
r0 = inotify_init()
r1 = inotify_init()
r2 = fcntl$dupfd(r0, 0x0, r1)
fstatfs(r2, &(0x7f0000000140)=""/133)

06:52:26 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:52:26 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

06:52:26 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)

06:52:26 executing program 1:
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000180)=0x8)

[ 1546.375153][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:26 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

[ 1546.439415][   T28] audit: type=1804 audit(1601275946.449:327): pid=28148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16375 res=1 errno=0
06:52:26 executing program 2:
getrlimit(0x7, &(0x7f0000000000))

06:52:26 executing program 0:
r0 = socket(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0)

06:52:26 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f0000000800))

[ 1546.483392][   T28] audit: type=1804 audit(1601275946.449:328): pid=28148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=16375 res=1 errno=0
[ 1546.503444][   T28] audit: type=1804 audit(1601275946.449:329): pid=28150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16375 res=1 errno=0
06:52:26 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x78dd}], 0x1)
semop(r0, &(0x7f0000000280)=[{0x4, 0x8}, {0x4, 0x7}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:26 executing program 0:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f00000010c0))

06:52:27 executing program 3:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RFLUSH(r0, &(0x7f0000000040)={0xb2}, 0x515359b6)
write$P9_RAUTH(r0, &(0x7f0000000100)={0x14}, 0x14)

06:52:27 executing program 1:
creat(&(0x7f0000000380)='./file0\x00', 0x0)
setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x2)

06:52:27 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5450, 0x0)

06:52:27 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000015)

06:52:27 executing program 5:
r0 = eventfd(0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
select(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x9}, 0x0)
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:52:27 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
openat$cgroup_procs(r2, &(0x7f0000000040), 0x2, 0x0)

06:52:27 executing program 1:
select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x7ff}, 0x0, 0x0)

06:52:27 executing program 3:
shmget(0xffffffffffffffff, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil)

06:52:27 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5451, 0x0)

06:52:27 executing program 1:
r0 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/120)

[ 1547.319057][   T28] audit: type=1804 audit(1601275947.329:330): pid=28192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16236 res=1 errno=0
[ 1547.340960][   T28] audit: type=1804 audit(1601275947.349:331): pid=28192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16236 res=1 errno=0
06:52:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x5411, &(0x7f0000000040)={0x2, 'veth0_to_bond\x00'})

06:52:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x1, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 1547.423423][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:28 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x0)
tkill(r0, 0x1000000000015)

06:52:28 executing program 1:
r0 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x44000)

06:52:28 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
r1 = dup(r0)
signalfd4(r1, &(0x7f0000000000), 0x8, 0x0)

06:52:28 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
dup3(r0, r1, 0x0)
ioctl$NS_GET_PARENT(r1, 0x541b, 0x73b000)

06:52:28 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20a40, 0x6)

06:52:28 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$P9_RLOCK(r0, 0x0, 0xfffffffffffffdc0)

06:52:28 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x412041, 0x102)

06:52:28 executing program 2:
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
memfd_create(&(0x7f0000000440)='GPL-\xfd\x02posix_acl_accessbdev+security$prockeyring:J\x00', 0x0)

06:52:28 executing program 0:
r0 = gettid()
exit(0x0)
sched_getscheduler(r0)

06:52:28 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r0, 0x409, 0xe)
pwrite64(r0, &(0x7f0000000080)="91", 0x1, 0x0)

06:52:28 executing program 2:
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)

06:52:28 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x842, 0x0)
write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7)

[ 1548.454206][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:28 executing program 4:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000003c00))
r1 = gettid()
tkill(r1, 0x15)

06:52:28 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
r1 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0)
readlinkat(r1, &(0x7f0000000500)='./file0\x00', 0x0, 0x0)

06:52:28 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)

06:52:28 executing program 2:
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x0)
write$P9_RSTAT(r0, 0x0, 0x0)

06:52:28 executing program 5:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x463c43, 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

06:52:28 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r1=>0x0)
getpgid(r1)

06:52:28 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
close(r0)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
write(r1, &(0x7f00000004c0)='1', 0x1)
sendfile(r1, r1, &(0x7f0000000200), 0x10000)
write$P9_RWALK(r0, 0x0, 0x0)

06:52:28 executing program 0:
semget(0x0, 0x2, 0x24a)

06:52:28 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x424342, 0x0)
write$P9_RCLUNK(r0, 0x0, 0x0)

06:52:28 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)

06:52:29 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0)

06:52:29 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
write$binfmt_aout(r0, 0x0, 0xffffff51)

06:52:29 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)

06:52:29 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x5451, 0x0)

[ 1549.334260][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1549.494381][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:29 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0x8903, &(0x7f00000000c0))

06:52:29 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$P9_RSETATTR(r0, 0x0, 0x50)

06:52:29 executing program 2:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RLOCK(r0, &(0x7f00000001c0)={0x8}, 0x8)
write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x2b7}, 0xb)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10d382, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:52:29 executing program 4:
open$dir(&(0x7f0000000040)='./file0\x00', 0x6d3a41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50d001, 0xdc)

06:52:29 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x8903, &(0x7f0000000000)=ANY=[])

06:52:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000001cc0)={0x2, @nfc, @can, @rc})

06:52:29 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = dup3(r1, r0, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x5411, &(0x7f00000002c0)={0x2, 'gre0\x00'})

06:52:29 executing program 4:
prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)

06:52:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000140), 0x0, 0xc0, 0x0, 0x0)

06:52:29 executing program 4:
r0 = socket(0x1, 0x1, 0x0)
setsockopt$sock_cred(r0, 0xffff, 0x8, 0x0, 0x0)

06:52:29 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000040))

06:52:29 executing program 3:
open$dir(&(0x7f0000001a00)='./file0\x00', 0x60d40, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
futimesat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

06:52:29 executing program 0:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x67, 0x2, 0x6, 0x7, 0x3, 0xb28079a2e43d3104, 0x5, 0x150, 0x40, 0x103, 0x5, 0x20, 0x38, 0x2, 0x5f, 0x7f, 0xea33}, [{0x1, 0x6, 0x3, 0x8, 0x40, 0x40, 0x972, 0x2}, {0x7, 0x1, 0x9, 0x9, 0x5, 0x7f, 0x400000000000000, 0x80000000}], "f07b18dbb4e4fc53dd4bf4a809c093b1a6f3253fa617dfa7e7666599b29fd0c0e19da2788d35e2039be8173fb33683708f0ce31550f8d052e357a43de177a061fb90110f092ec207779e948a4642df2573f0f4e93d7d44ee6c43", [[], [], [], [], [], [], [], [], []]}, 0xa0a)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
write$P9_RFSYNC(r0, &(0x7f0000000a40)={0x7, 0x33, 0x1}, 0x7)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/zero\x00', 0x101880, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000ac0), &(0x7f0000000b00)=0x40)
fstatfs(r1, &(0x7f0000000b40)=""/35)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/null\x00', 0x600100, 0x0)
r3 = openat(r2, &(0x7f0000000bc0)='./file0\x00', 0x200400, 0x0)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000c00)={0x9, 0x4, 0xfeba})
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000c40)="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")
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
unlinkat(r0, &(0x7f0000000d40)='./file0\x00', 0x200)
r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/null\x00', 0x40, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000dc0), 0x10)
fsetxattr$security_evm(r5, &(0x7f0000000e00)='security.evm\x00', &(0x7f0000000e40)=@ng={0x4, 0xf, "851a"}, 0x4, 0x1)
write$9p(0xffffffffffffffff, &(0x7f0000000ec0)="a32e2efd1d9297bb9b5741574f9902f2908188854c7c5b2f0117c32e77ef73286fad63eb147df0ae3a1f09939a4f219c4f93f0751b959a347af51b4dea05aad83436ca506275af56a50f952f1d43329031af9e7f686be5cc6a84fa49539371ae17e97b00cc9184080aa9f98b54d4d6a30c77f4832aa7f3879be14184843e74fb23238ba24b7b86087a01fb9eefd55359fc911d89003200ba711e2fdbc60695b3c4b975c22b8539848cafea233cdac1720e2561acc15abf732b8d6728e070afc0a401b12b64ef6d4a55ac05add068", 0xce)

06:52:29 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x14)
r2 = eventfd(0x80000000)
sendfile(r2, r1, &(0x7f00000001c0), 0x8808100000002)
close(r2)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2, 0x0)
tkill(r0, 0x13)

06:52:29 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = dup3(r1, r0, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x5411, &(0x7f00000002c0)={0x2, 'gre0\x00'})

06:52:29 executing program 4:
r0 = socket(0x1, 0x2, 0x0)
r1 = dup(r0)
write$P9_RCREATE(r1, 0x0, 0x0)

06:52:29 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80002, 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:29 executing program 3:
r0 = socket(0x4000000000010, 0x1000000000080002, 0x0)
sendmsg$sock(r0, &(0x7f0000008800)={0x0, 0x0, 0x0}, 0x0)

06:52:30 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x2040, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x1000)

06:52:30 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, 0x0, 0x0)

06:52:30 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f0000000140))

06:52:30 executing program 2:
r0 = memfd_create(&(0x7f0000001580)='\x00', 0x0)
write$P9_RSETATTR(r0, 0x0, 0x0)

06:52:30 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
rmdir(&(0x7f0000000380)='./file0/file0\x00')

06:52:30 executing program 4:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640)='/proc/thread-self\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TCXONC(r0, 0x5450, 0x0)

06:52:30 executing program 2:
r0 = inotify_init1(0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x5421, 0x400000)

06:52:30 executing program 5:
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT(r0, 0x0, 0x10, 0x0)

06:52:30 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}, {0x4, 0x1f}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x78db}, {0x4, 0x6}, {0x4, 0x2}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:30 executing program 3:
open$dir(&(0x7f0000000480)='./file0\x00', 0x301040, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', 0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x0)

06:52:30 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
writev(r1, 0x0, 0x0)

06:52:30 executing program 0:
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

06:52:30 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5450, 0x0)

06:52:30 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0)

06:52:30 executing program 2:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffff9c, 0x0)

06:52:30 executing program 3:
r0 = memfd_create(&(0x7f00000004c0)='}+lo\x00uMH\xf2}\x9fMY}\t\xfd\xc2\xab\xdf\x01N\xcc:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xd79&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89VsV\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xdf\\\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v', 0x0)
r1 = dup(r0)
lseek(r1, 0x0, 0x0)

06:52:30 executing program 5:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4037e, 0x0)
write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfffffe3d)
sendfile(r0, r0, &(0x7f00000001c0), 0x808100000002)
r1 = dup(r0)
statx(r1, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640))

06:52:30 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair(0xb, 0x4, 0x9, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'veth0_to_bridge\x00', {0x8}, 0x4})
getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80)
r2 = semget$private(0x0, 0x4, 0x200)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x2])
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/166)
semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000180)=""/156)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r3=>0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$FS_IOC_MEASURE_VERITY(r4, 0x8903, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])
statx(r4, &(0x7f00000003c0)='./file1\x00', 0x6000, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresgid(0xee01, r5, 0xffffffffffffffff)
r6 = getuid()
setreuid(0xee00, r6)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r3, r5, r6, r7, 0x4, 0x5}, 0x1f, 0xf4d7, 0x0, 0x0, 0x0, 0x0, 0x8})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, r5}, 0xc)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, r5}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000), 0x3c33)

06:52:30 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
write$P9_RXATTRCREATE(r0, 0x0, 0x0)

06:52:30 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

[ 1550.363603][   T28] audit: type=1804 audit(1601275950.369:332): pid=28366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="file0" dev="sda1" ino=16242 res=1 errno=0
[ 1550.544343][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1550.552874][   T28] audit: type=1800 audit(1601275950.559:333): pid=28363 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16380 res=0 errno=0
06:52:31 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}, {0x4, 0x1f}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x78db}, {0x4, 0x6}, {0x4, 0x2}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:31 executing program 3:
socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x223, 0x0, 0xffffffffffffffc1}, 0x0)

06:52:31 executing program 2:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffff9c, 0x0)

06:52:31 executing program 4:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

06:52:31 executing program 0:
open(&(0x7f0000000000)='./file0\x00', 0xc2440, 0xc4)

06:52:31 executing program 5:
pipe2(&(0x7f0000002640)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r0, 0x0, 0x0)

06:52:31 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$9p(r0, 0x0, 0x0)

06:52:31 executing program 3:
r0 = socket$unix(0x1, 0x1000000000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
write$P9_RFLUSH(r3, 0x0, 0x0)

06:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000140))

06:52:31 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)

06:52:31 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5411, 0x0)

06:52:31 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_score_adj\x00')
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0)

[ 1551.574330][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:31 executing program 1:
socketpair(0x1a, 0x5, 0xfffffbfe, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x1})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00)
pipe2(&(0x7f00000016c0)={<r1=>0xffffffffffffffff}, 0x0)
r2 = socket$unix(0x1, 0x200000000000002, 0x0)
dup3(r2, r1, 0x0)
setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, <r3=>0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000ac0)=""/85, 0x5b}, {&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000500)=""/58, 0x40}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000540)=""/116, 0x6b}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f00000007c0)=""/73, 0x49}, {&(0x7f0000000c00)=""/253, 0xfd}], 0xa, &(0x7f0000001040)=""/107, 0xfeb4}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001100)={'team0\x00', r3})
readahead(0xffffffffffffffff, 0x8003, 0xe38)
open(&(0x7f0000000180)='./file1\x00', 0x251441, 0x1b3)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000080))
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000280)={0x0, 0xea60}, 0x10)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
r5 = semget$private(0x0, 0x4, 0x420)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x1000)

06:52:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000)

06:52:31 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0)

06:52:31 executing program 5:
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x0)
read$char_usb(r0, 0x0, 0x0)
write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0)

06:52:31 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file1\x00')

06:52:31 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001840)='/dev/urandom\x00', 0x40201, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

06:52:31 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write$binfmt_script(r0, 0x0, 0xfffffdd4)

06:52:31 executing program 3:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

06:52:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f000000c1c0)='comm\x00')
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)

06:52:31 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
r1 = socket$unix(0x1, 0x200000000005, 0x0)
dup2(r1, r0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0)

06:52:31 executing program 4:
r0 = getpgrp(0xffffffffffffffff)
sched_getaffinity(r0, 0x8, &(0x7f0000001640))

06:52:32 executing program 1:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080))

06:52:32 executing program 0:
r0 = socket(0x1, 0x5, 0x0)
r1 = dup(r0)
ioctl$TIOCGDEV(r1, 0x5450, 0x0)

06:52:32 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffff8)

06:52:32 executing program 3:
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$KDSKBLED(r2, 0x5401, 0x0)

06:52:32 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001800)='/dev/null\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f0000001980)=""/63)

06:52:32 executing program 0:
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1)

06:52:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)

06:52:32 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0)

06:52:32 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$TCXONC(r0, 0x5450, 0x1)

06:52:32 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
flock(r0, 0x6)

06:52:32 executing program 0:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7}, 0x7)
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x13)

06:52:32 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x5452, &(0x7f0000000000)={0x1, 'sit0\x00'})

06:52:32 executing program 2:
mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)

[ 1552.119912][   T28] audit: type=1804 audit(1601275952.129:334): pid=28444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16259 res=1 errno=0
06:52:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x5450, 0x0)

06:52:32 executing program 3:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8132, 0xffffffffffffffff, 0x0)
tkill(r0, 0x1000000000016)

[ 1552.161413][   T28] audit: type=1804 audit(1601275952.159:335): pid=28449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16259 res=1 errno=0
06:52:32 executing program 2:
r0 = semget$private(0x0, 0x4, 0x200)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000540)=[0x2])
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/166)
semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000180)=""/156)
semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000400)=""/117)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$FS_IOC_MEASURE_VERITY(r2, 0x8903, &(0x7f0000000080)=ANY=[@ANYBLOB="1a4cfaae8973ffe36600"])
statx(r2, &(0x7f00000003c0)='./file1\x00', 0x6000, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresgid(0xee01, r3, 0xffffffffffffffff)
r4 = getuid()
setreuid(0xee00, r4)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r1, r3, r4, r5, 0x4, 0x5}, 0x1f, 0xf4d7, 0x0, 0x0, 0x0, 0x0, 0x8})
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup2(r7, r6)
setsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0)

06:52:32 executing program 5:
r0 = semget$private(0x0, 0x207, 0x0)
semop(r0, &(0x7f0000000180)=[{0x3, 0x4}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x3}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

06:52:32 executing program 0:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$9p(r1, &(0x7f0000000380)="709ad523b2b193efd099e5bc7bca78eb09823e29aefad1d2ec6c282dc5000cd90e461a2844c56b8e314c544aef4b30ee48def8e8c98a9628520247a429efeacf0536f12995261356d5d735708f310c3ed429c083248abb9c81bec738bcbc17e5695d2ebfcffd159316083aa5fb8220e9e980625e15531b508b6a3f74850c43b16262047849e17c0d65c82b983f03f42166282b6de5f2e9f03eec0f4d197d74dcd651dd89200b9352076897bd33d5ff1676cb9c02782b709aad7570d0fe5bce5ec4fec621c19e1cf4", 0xffffff6a)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000240)={0x18}, 0x18)
dup3(r2, r0, 0x0)

06:52:32 executing program 1:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5450, 0x0)

06:52:32 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='auxv\x00')
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5450, 0x0)

06:52:32 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
ioctl$VT_SETMODE(r1, 0x541b, 0x0)

06:52:32 executing program 3:
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x46, &(0x7f0000000080)=[{&(0x7f0000000040)=""/9}], 0x1000000000000142}}], 0x1, 0x0, 0x0)

06:52:32 executing program 2:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

[ 1552.374753][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1552.614283][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:33 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
flock(r0, 0x2)

06:52:33 executing program 4:
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x541b, 0x0)

06:52:33 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

06:52:33 executing program 0:
r0 = epoll_create1(0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

06:52:33 executing program 2:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_devices(r0, 0x0, 0xffffffffffffff04)

06:52:33 executing program 5:
r0 = getpgrp(0x0)
rt_sigqueueinfo(r0, 0xfffffffe, &(0x7f0000000000)={0x0, 0x0, 0xfffffff7})

06:52:33 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f000000a240)={0x0, 0x0, 0x0}, 0x0)

06:52:33 executing program 2:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
tee(r1, r0, 0x8, 0x0)
close(r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a00)='statm\x00')
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:52:33 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$netlink(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000000080)={0x12b4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x88}, @nested={0x11a4}, @generic="dbfed5181f66c08d94e9", @generic="c1de1722d976418867299bfacaec8fcaea310b547f9eccf33ad118ef7a92a027cb67b3143d528427c7676c40ed363478cab978f5053a99fd80933e651ebbb95ddd74f07afb8c25883d514090cce3b943af764e5b060d7944b9a786fd4bd66852e9f7530f54ab3808c72bb6"]}, 0x12b4}, {&(0x7f0000001400)={0x12f8, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x8c}, @generic="d0362cfb23f0882225999854788b47f35f92dea74f9bc50b6f63adc913e536d6f6570e18d15fee1217a5ee8770f7ec5b448d1f418435202c60369086de46ac1cab67dc6f15166a4c2499d70d7c98c3682eb5031c673702088a177fa8fdf607f2b040f82164b9c96a40cf5ff6825cf88966315eada8c1425af786cd913f5ee939b209580965eade26b01a5be317e67da418938d9e6d2a996775d8672ec2d6d13664f4576bc8", @nested={0x11b4}]}, 0x12f8}, {&(0x7f0000002700)={0x1a58, 0x0, 0x0, 0x0, 0x0, "", [@generic="5a8d98d3dfec713dc5f7b543a982de8d73a50fafa71d0f4198b35381b322f40327f52c50b1e43d0f4d12ad8fabd5096d666db9eddaf4963b7e355416b9ff76ef5460cc929fd340b8a25fd67c938613ee6d2bf86508df8453c3df47ce4b49a766284652807c6cc98d9a0cbea2e9b43aa2cf2c20d153d80ed8d9c5018ab05b3df7ebb3439ad50538e48e2bf940d074d76d44190e2cb6a2a7b3b11df8f7d2b356926342922475ecfcefe245ecc19b6e9e6543af2b1711074a8e0caa3dfb7e3ae108011e8cc94de085d00df86c0a5dd3a6f5b48a5fce2fa662", @generic="20657cb44e863fb41d628b12cb02904f2420b6acd24572e3b742dbd256d7d26b9aa3e2219a45b48d6e1d4d012a47aa0ea750a0b0762708da6dd2fa2da8f2253106cd0ac9a618fddabb25910e3b8827deed4a848a9f5a7192d96d7cc9dc30434c9eb407ea60196062490ffb7b8e0d9b4a13afc27ab01fdc6cc543f3b22fba5e14dc0db8cd96f3d6a29f61bc09d5ad0cd47f0de26f7498ba92f67db5889d90", @nested={0x18d0}]}, 0x1a58}], 0x3}, 0x0)
sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c9", 0x1}], 0x1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

06:52:33 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x28, 0x0, 0x0)

06:52:33 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0)
close(r0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)

06:52:33 executing program 0:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x149541, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r1, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x2)

06:52:33 executing program 3:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0xfffffdc9)
r1 = semget$private(0x0, 0x2, 0x172)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000340)=""/140)
semop(r1, &(0x7f0000000040)=[{0x2, 0x8, 0xc00}, {0x0, 0x6, 0x800}], 0x2)
semctl$IPC_RMID(r1, 0x0, 0x0)
write$P9_RLERROR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="53fe02ff07000099fd74df75737465642fd2212d9f9c997c4c82ff4d6d6d643573756d7d73656c696e757837bfafd81bbfa8e56433"], 0x204)
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000000200)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x84, 0x0}}], 0x1, 0x40002043, 0x0)
fsetxattr(r2, &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000180)='\x00', 0x1, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0xac)
r5 = eventfd(0x7)
read$char_usb(r5, &(0x7f0000000740)=""/210, 0xd2)
r6 = eventfd(0x7)
read$char_usb(r6, &(0x7f0000000740)=""/210, 0xd2)

06:52:33 executing program 4:
pipe2(&(0x7f0000000240)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

06:52:33 executing program 1:
r0 = epoll_create(0x800)
fcntl$getflags(r0, 0x0)

06:52:33 executing program 0:
rt_sigaction(0x3f, 0x0, 0x0, 0x8, &(0x7f0000000180))

06:52:33 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$P9_RLERROR(r2, 0x0, 0x0)

[ 1553.157334][   T28] audit: type=1804 audit(1601275953.169:336): pid=28519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=E91F7189591E9233614B dev="sda1" ino=16257 res=1 errno=0
06:52:33 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r1, &(0x7f0000000100), 0x8)
sendfile(r1, r1, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x1, 0x12, r1, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
tkill(r0, 0x13)

06:52:33 executing program 4:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
write$P9_RLERROR(r0, 0x0, 0x0)

06:52:33 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00')
write$P9_ROPEN(r0, 0x0, 0x0)

06:52:33 executing program 3:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ftruncate(r0, 0x0)

06:52:33 executing program 1:
mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, 0x0)

06:52:33 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

06:52:33 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

06:52:33 executing program 1:
r0 = eventfd2(0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)

06:52:33 executing program 3:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
fcntl$setpipe(r1, 0x407, 0x0)

06:52:33 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f000000bf40)='/dev/urandom\x00', 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

06:52:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "3160eae1624d5a93554a9d53b9b94a80060001"})

06:52:33 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_open_pts(r0, 0x0)

06:52:33 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r1, &(0x7f0000000100), 0x8)
sendfile(r1, r1, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x1, 0x12, r1, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
tkill(r0, 0x13)

06:52:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)

06:52:33 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
statx(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

06:52:33 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5450)

06:52:33 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_freezer_state(r0, 0x0, 0x0)

06:52:33 executing program 1:
io_setup(0x0, &(0x7f00000001c0))
io_setup(0x0, &(0x7f00000001c0))

06:52:33 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x384c2, 0x0)
r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0x0)

06:52:33 executing program 0:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x2008c1, 0x0)
write$P9_RSYMLINK(r0, 0x0, 0x0)

06:52:33 executing program 1:
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RSTAT(r0, &(0x7f0000000240)=ANY=[], 0xc5a9b461)
write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x12, 0x7, 0x0, {{0x5, 'auxv\x00'}}}, 0x12)

06:52:33 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
fadvise64(r2, 0x0, 0x0, 0x0)

06:52:33 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x38b046, 0x102)

06:52:33 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000040), 0x0, 0x200408c5, 0x0, 0x118)

[ 1553.654747][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:33 executing program 4:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)

06:52:33 executing program 5:
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0)

06:52:33 executing program 0:
r0 = epoll_create(0x2)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5450, 0x0)

06:52:33 executing program 3:
mknod$loop(&(0x7f0000000180)='.//ile0\x00', 0x0, 0x1)
listxattr(&(0x7f0000000040)='.//ile0\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x5450, 0x0)

06:52:33 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCADDDLCI(r1, 0x5452, &(0x7f0000000000)={'batadv0\x00'})

06:52:33 executing program 2:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, 0x0)

06:52:33 executing program 0:
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r2, 0x0)
getsockname(r2, 0x0, &(0x7f0000000080))

06:52:33 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x9}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}, {0x4, 0x111}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:33 executing program 2:
r0 = eventfd2(0x0, 0x0)
write(r0, &(0x7f0000000000)="66668239ec2c8dba", 0x8)

06:52:33 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FIONCLEX(r0, 0x5450)

06:52:33 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0xd, &(0x7f0000000100)=""/166, &(0x7f0000000080)=0x35)

06:52:33 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x5450, 0x0)

06:52:33 executing program 4:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_script(r0, 0x0, 0x0)

06:52:33 executing program 5:
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ff4000/0x1000)=nil)
semop(r0, &(0x7f0000000080)=[{0x0, 0x6b0}], 0x1)

06:52:33 executing program 3:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x1, 0x3, 0x0)
dup2(r1, r0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

06:52:33 executing program 2:
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400000002c2, 0x0)
write$P9_RREADDIR(r0, 0x0, 0x0)

06:52:33 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$sock(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)

06:52:33 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pread64(r2, 0x0, 0x0, 0xfffffffffffffffa)
r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x8)
ioctl$FIOCLEX(r3, 0x5451)
dup3(r0, r1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSTI(r4, 0x5421, 0x8093dc)
ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000240))
r5 = semget$private(0x0, 0x4, 0x10)
semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000280)=""/30)
shmctl$SHM_LOCK(r5, 0xb)
semctl$GETNCNT(r5, 0x1, 0xe, &(0x7f0000000000)=""/15)
semctl$GETVAL(r5, 0x3, 0xc, &(0x7f0000000100)=""/198)
getsockname$netlink(r1, 0x0, &(0x7f00000000c0))

06:52:34 executing program 0:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
write(r0, 0x0, 0x0)

06:52:34 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:52:34 executing program 2:
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1a140, 0xe)

06:52:34 executing program 5:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0x5451, 0x0)

06:52:34 executing program 4:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfffffffffffffcf1)

06:52:34 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
recvmmsg(r0, &(0x7f000000cd00), 0x0, 0x40, &(0x7f00000008c0)={0x0, 0x1c9c380})

06:52:34 executing program 0:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

06:52:34 executing program 3:
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffff5b)

06:52:34 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
getdents(r2, &(0x7f00000001c0)=""/84, 0x54)

06:52:34 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
sendmmsg$unix(r0, &(0x7f0000007340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0)

[ 1554.700381][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:34 executing program 1:
r0 = open(&(0x7f00000004c0)='./file0\x00', 0x101040, 0x0)
sendmmsg$unix(r0, 0x0, 0x0, 0x0)

06:52:34 executing program 0:
pipe2(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$FICLONE(r0, 0x5451, 0xffffffffffffffff)

06:52:34 executing program 3:
prctl$PR_CAPBSET_READ(0x17, 0x100000000025)

06:52:34 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netlink(r0, 0x0, &(0x7f0000000100))

06:52:34 executing program 0:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
fdatasync(r0)

06:52:34 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
r3 = dup2(r1, r2)
r4 = socket(0x1, 0x5, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3)
sendfile(r5, r0, 0x0, 0x0)

06:52:34 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup(r0)
ioctl$int_out(r1, 0x5452, &(0x7f0000000700))

06:52:34 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0x5451, 0x0)

06:52:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="9b17c6d01f05c22a4c6ff59a51f1e709f75280c481f4f8e1639e3b28ed1455bf84bc985470dd9baefdd17e66a23315215f1d1d233c14c290b24c1c64b382490a19d923dfe7dc07dfab13ec84ec8d170141d7a0c03864174d4b58d736fdb4f530b3cbb80d041f622951abf458263a0061b8674c8a2663156db0814d54cdb48dacc4b7afbaccbb", 0x0, 0xc010, 0x0, 0xffffffffffffffa4)

06:52:34 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x36)
write$P9_RRENAME(r1, 0x0, 0x0)

06:52:34 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$getown(r0, 0x9)
sched_setscheduler(r1, 0x0, &(0x7f0000000000))

06:52:34 executing program 0:
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x12040, 0x22)

06:52:34 executing program 3:
open$dir(&(0x7f0000000080)='./file0\x00', 0x5e4842, 0x117)

06:52:34 executing program 4:
r0 = inotify_init()
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = dup2(r2, r1)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x5421, &(0x7f0000000080)={'xfrm0\x00'})

06:52:35 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002600)='/dev/urandom\x00', 0x101c02, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

06:52:35 executing program 1:
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$PIO_CMAP(r0, 0x541b, &(0x7f0000000080))

06:52:35 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000001800)='cmdline\x00')
write$P9_RMKNOD(r0, 0x0, 0x5)

06:52:35 executing program 3:
r0 = epoll_create(0x3ff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x5452, &(0x7f0000000040))

06:52:35 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
prlimit64(r0, 0x4, &(0x7f0000000080), &(0x7f00000000c0))

06:52:35 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$P9_RLINK(r2, 0x0, 0x0)

06:52:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, &(0x7f0000000b40))

06:52:35 executing program 1:
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8901, &(0x7f0000000040)={'veth0_to_team\x00', 0x0})

06:52:35 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7}, 0x7)
close(r1)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000016)

06:52:35 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = accept$unix(r0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$TCFLSH(r2, 0x5421, 0x96001d)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
read$eventfd(r2, &(0x7f0000004fc0), 0x8)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x5452, &(0x7f0000000780)={0x0, 'virt_wifi0\x00'})

06:52:35 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5451, 0x0)

06:52:35 executing program 3:
r0 = socket(0x10, 0x800000000080003, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$FICLONE(r0, 0x5451, r1)

06:52:35 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
r1 = dup(r0)
write$binfmt_elf32(r1, 0x0, 0x0)

06:52:35 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
write$P9_RLINK(r2, 0x0, 0x0)

06:52:35 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = dup(r0)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)

06:52:35 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x5452, &(0x7f0000000780)={0x0, 'syz_tun\x00'})

06:52:35 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000fc0))

06:52:35 executing program 0:
r0 = eventfd(0x0)
r1 = gettid()
write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0', "101ddcfe"}, 0x8)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
write$binfmt_elf64(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="07454c46530003a9"], 0x554)
close(r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x501, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:52:35 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='#\xa9\x06\x00\x00\x00Ra\x83\x1c\xef\\F\x9a\x99E\x9d\xf3\xc8\xa6\xfd\x01~\x8b\x9ebe\xbbO\xe0\x94\xd4!24&\xce9\x1e\xf5\xb7\xe8!\x04\xf9\xd2n]7\xb3', 0x0)
r1 = dup(r0)
r2 = memfd_create(&(0x7f0000000100)='#\xa9\x06\x00\x00\x00Ra\x83\x1c\xef\\F\x9a\x99E\x9d\xf3\xc8\xa6\xfd\x01~\x8b\x9ebe\xbbO\xe0\x94\xd4!24&\xce9\x1e\xf5\xb7\xe8!\x04\xf9\xd2n]7\xb3', 0x0)
r3 = dup(r2)
r4 = dup3(r3, r1, 0x0)
ioctl$BTRFS_IOC_RESIZE(r4, 0x8903, &(0x7f0000000140)=ANY=[])

06:52:35 executing program 3:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x446, 0x0)

06:52:35 executing program 2:
r0 = epoll_create1(0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

06:52:35 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r1, r0, 0x0)
r2 = accept(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x5451, 0x0)

06:52:35 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0)

06:52:35 executing program 3:
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = epoll_create(0x0)
timerfd_create(0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
ioctl$FITHAW(r1, 0xc0045878)
listen(r0, 0x0)
r2 = accept$unix(r0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x5450, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
recvmsg(r4, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'wg2\x00', {0x2, 0x0, @multicast1}})

06:52:35 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8901, &(0x7f0000000080)={'veth0_virt_wifi\x00'})

06:52:35 executing program 4:
r0 = inotify_init()
r1 = memfd_create(&(0x7f00000000c0)='Jse\x01\x00&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5452, 0x0)

06:52:35 executing program 2:
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3)

06:52:35 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
write(r0, &(0x7f0000000040)='\x00', 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x10000)
r1 = dup(r0)
write$cgroup_subtree(r1, 0x0, 0x0)

06:52:35 executing program 5:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)

06:52:35 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TCFLSH(r0, 0x5421, 0x960003)

06:52:35 executing program 2:
r0 = openat$ptmx(0xffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCNOTTY(r0, 0x5410)

06:52:35 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
writev(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)="15058d650c64af172b19cad2410d66a5e47d09831295e0ebcfdfef177b5567d12a281635a979044fe47f74e5e96652124c80134f66958f88528ce25d083a3f4e70061d128e0198ca553eb928f10ad1e9cbd480d2e49686fef8fa62a13d73e7ab90dc2b3cf1191eec88e413f22d4b859b80ffc5c2b2c78be8f15c1fd257f4d9d0724c2db4c44a1f9f7595876cae865ff387b6ba2d671aa4c26ff38536520c03318ec2bc7558f4be47b9b5212882f5462694e5d8e1fc0baa69ccc4492e8305d1abc6080f4d35bfe75e0770fcf689e725724945f24d019b71b8ff7ded5ddba56caf577875421e", 0xe5}, {&(0x7f00000001c0)="7170e8a1c301dcce99fdf539e161dad5796b6b5db7b18237881aad7dd8002a59973706fd11c80cd6c68d4e9b352184a7989e042e0dfe35d2a7d669e896466d8816e8a835c7ea49ed519ce5962071695996420975b6f8d7a838", 0x59}, {&(0x7f00000015c0)="1ee2e39e3b1b3e836ea4bac10c1e1e6ffc237e3b2c35a5f640ecbe80e75a14e1864cd4ca55fcdfc4d0587069be2a9074519286ad2afaa6820922cd201d7ef088b223d9b6cd48dae793adb03b6a4493c27700a7e97d53df62a93e34fd42bef3e5390f4819515d51a96ca522e759bf4eb26e77371f3a240b88f3f6647e7e365b351cc162225ec482194145b8ba399402062b49bdfbe4cd2c5bf327f8eefbf50f6dbb9697c959b57d21ff6cdf10788054c17f18a02ed06f88cea2282a83bf18494edb336f48ce3bbbdf782e94c78c750f79c084e7d27b5629ae79b212521420fddee0433ec2", 0xffffff8b}, {&(0x7f0000000340)="7132f5943e94b435a797a39e60d65039238324339e6903c0c727a71114d8f514eb6e405dbbefcb931dd362953fec9f41cb540189cfc799842ad3ac3ba955f708e603a792a3fdf0dd27776637a3a945135b1a37299a92d46039ed55e26a2c9fe08fe95c351aa130cd571e42ac2b43afa6e221d3fb2042885721c310cafc28367cd06d7b2800d2c291d77bbf0e4113b4ff8f1c5351b3c385fb3fcc8d64bf034d1639d37891e47e44f90dfca8a9", 0xac}, {&(0x7f0000000400)="96d90d1a152a066749c7504ae932916b39dbe1521b7fa5b5237687605806bddfebd02d039e6dd335f5adb53d5f5ae4f2970ac3e84ebe6898f9465a859d3b0d18693fe449da5bd09bc24538a8e3ee42774cb3969f245b98076dff7a52fb3e404cde87169fa4ebb70af65376bbfd0fd0bff2fc255ff2cc9b5e3da228017d", 0x7d}, {&(0x7f0000000000)="53cc9cf078e6dc9c486b1efebc2d76f19d529461c7505c1534b94b5753d348592516e538793a7966d87368357846f9b96de4ef4e8c527bdb4663257b37786b80aa56478ab54161a4e261cbb0456a36fcaf78ad36149988", 0x43}, {&(0x7f0000000540)="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", 0xff4}], 0x7)

06:52:35 executing program 3:
open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0)

[ 1555.415730][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:35 executing program 2:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
fstat(r0, &(0x7f0000000100))

06:52:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00')
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x5421, &(0x7f0000000080)={'bond0\x00', {0x2, 0x0, @broadcast}})

06:52:35 executing program 1:
creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0)

06:52:35 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r0, 0x541b, 0x0)

06:52:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000080)=0x1f0)
dup3(r0, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000080)=0x1f0)
sendmmsg$sock(r3, 0x0, 0x0, 0x0)

06:52:35 executing program 2:
r0 = open$dir(&(0x7f0000000200)='./file1\x00', 0x40000400000202c2, 0x0)
fstatfs(r0, &(0x7f0000000000)=""/105)

[ 1555.744185][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1555.819259][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:36 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x2ef)

06:52:36 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x5452, 0x0)

06:52:36 executing program 3:
r0 = inotify_init1(0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$TIOCSSOFTCAR(r1, 0x5421, &(0x7f0000000040))

06:52:36 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
ioctl$TIOCSLCKTRMIOS(r0, 0x541b, &(0x7f0000000080))

06:52:36 executing program 2:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
tkill(r0, 0x1000000000016)

06:52:36 executing program 5:
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40))

06:52:36 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)

06:52:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
write$eventfd(r0, 0x0, 0x0)

06:52:36 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x224040, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000640)={0x0, <r2=>0x0})
sendmmsg$unix(r1, &(0x7f0000000c80)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="d17732787ec0246e348f059f1cb8ce769f8570f728e72713e6f225637eca118137094b0bf960bbb783d177625e0209f99e0471894f4625df760b5ca3be88de4534da3dc4120d59dc6fdbceceedcf9f959ee5f6af48a2acf40db21944b7487f1a8e7c56a07dacd802413ce21c1b1116863a7146292a5ae4db816d6f639cdfe5b71518da8364b0744b8c", 0x89}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xf0, 0x4}, {&(0x7f0000000a40)=@file={0x0, './file0/file1/file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="0cb2789f14c73ffbb9103bcc67f9083f8b9a7d1aae9d", 0x16}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4000400}], 0x2, 0x800)
r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xf7, 0x7})
r4 = dup2(r0, r1)
r5 = accept4$unix(r0, 0x0, &(0x7f00000000c0), 0x80800)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000200)={0x8, 'macvtap0\x00', {'bridge0\x00'}, 0x2})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair(0x1, 0x800, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r7)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000380), &(0x7f0000000140)=0x4)
r8 = inotify_init()
openat$cgroup_freezer_state(r4, &(0x7f0000000500)='freezer.state\x00', 0x2, 0x0)
fallocate(r6, 0x3c, 0x0, 0x80)
fcntl$getownex(r8, 0x10, &(0x7f0000000640))
r9 = semget(0xffffffffffffffff, 0x8, 0x0)
shmctl$SHM_STAT(r9, 0xd, &(0x7f0000000180)=""/17)

06:52:36 executing program 3:
r0 = eventfd2(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x5450, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000100))
fstat(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
setresgid(r2, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x5450, 0x0)
r4 = semget$private(0x0, 0x4, 0x200)
shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/157)
r5 = getgid()
setregid(0x0, r5)
r6 = getgid()
setregid(0x0, r6)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000140)={{0x0, 0xee00, r5, r1, r6, 0x60, 0x81}, 0xd312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r7 = gettid()
tkill(r7, 0x1000000000016)
getpriority(0x0, r7)
write$P9_RFSYNC(r3, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0))

06:52:36 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={<r4=>0x0}, &(0x7f0000000180)=0xc)
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r4})

06:52:36 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCGLCKTRMIOS(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "c28d46d40000000000e4040000000000da00"})

06:52:36 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffffda, &(0x7f0000000200), 0x100000000000035e, &(0x7f0000000240)=""/104, 0x59}, 0x0)

06:52:36 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
write$P9_RREADDIR(r1, 0x0, 0x0)

06:52:36 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = fcntl$dupfd(r1, 0x0, r3)
connect$unix(r4, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$TIOCSLCKTRMIOS(r4, 0x541b, &(0x7f0000000180))

06:52:36 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r1)

06:52:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000), 0x0, 0x8000, &(0x7f0000000340)=@nl, 0x80)

06:52:36 executing program 1:
r0 = socket(0x10, 0x800000000080003, 0x0)
r1 = socket(0x10, 0x800000000080003, 0x0)
r2 = dup3(r0, r1, 0x0)
fcntl$notify(r2, 0x0, 0x0)

06:52:36 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$RNDCLEARPOOL(r2, 0x5451, 0x0)

06:52:36 executing program 2:
r0 = inotify_init1(0x0)
r1 = dup2(r0, r0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180))

06:52:36 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$TIOCMBIS(r0, 0x5452, &(0x7f0000000080))

[ 1556.774272][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1557.824173][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1558.454122][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1558.854252][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:39 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0)
fdatasync(r0)

06:52:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$netlink(r0, 0x0, &(0x7f0000000140))

06:52:39 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
write$P9_RRENAMEAT(r0, 0x0, 0x0)

06:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r0, 0x0, &(0x7f0000000040)=0xfffffffffffffd8f)

06:52:39 executing program 2:
r0 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/139)

06:52:39 executing program 5:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

06:52:39 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8903, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

06:52:39 executing program 0:
r0 = open$dir(&(0x7f0000000800)='./file0\x00', 0x40000400000002c2, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

06:52:39 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, 0x0)

06:52:39 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='maps\x00')
write$cgroup_pid(r0, 0x0, 0x0)

06:52:39 executing program 0:
r0 = creat(&(0x7f0000000740)='./file0\x00', 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780))

06:52:39 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
renameat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file1\x00')

06:52:39 executing program 3:
mknod(&(0x7f0000000ffa)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000f80)='./bus\x00', 0x0, 0x0)
select(0x40, &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0)

06:52:39 executing program 4:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x5451)

06:52:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x82, 0x0)
writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="c2", 0x1}], 0x1)

06:52:39 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
fcntl$setown(r0, 0x8, 0x0)

06:52:39 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000009280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="100000000020"], 0x10}], 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000000), 0x400000000000071, 0x0)

06:52:39 executing program 5:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
ioctl$VT_WAITACTIVE(r0, 0x5607)

06:52:39 executing program 3:
symlink(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)='./file1\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)

06:52:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, 0xffffffffffffffff, 0x0, 0x40000140, &(0x7f0000000040))

06:52:39 executing program 2:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x88041, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5450, 0x0)

06:52:39 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1530c2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0)

06:52:39 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
fcntl$setown(r0, 0x8, 0x0)

[ 1559.663977][   T28] audit: type=1804 audit(1601275959.669:337): pid=28885 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16277 res=1 errno=0
[ 1559.683409][   T28] audit: type=1804 audit(1601275959.679:338): pid=28886 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16277 res=1 errno=0
06:52:39 executing program 1:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0xfff, &(0x7f0000000140))

06:52:39 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)

06:52:39 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451)

06:52:39 executing program 0:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$P9_RREMOVE(r2, 0x0, 0x0)

06:52:39 executing program 3:
symlink(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)='./file1\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)

06:52:39 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$KDADDIO(r0, 0x4b34, 0x0)

[ 1559.830921][   T28] audit: type=1804 audit(1601275959.839:339): pid=28911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16259 res=1 errno=0
06:52:39 executing program 4:
r0 = epoll_create(0x7)
fchmod(r0, 0x0)

06:52:39 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0)

06:52:39 executing program 1:
mknod(&(0x7f0000000140)='./bus\x00', 0x1040, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
symlink(&(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)='./file0\x00')
tkill(r0, 0x1000000000016)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

06:52:39 executing program 3:
r0 = gettid()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r0})

06:52:39 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000500))

06:52:39 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
write$P9_RLINK(r2, 0x0, 0x15)

[ 1559.879150][   T28] audit: type=1804 audit(1601275959.879:340): pid=28913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16259 res=1 errno=0
[ 1559.904293][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:39 executing program 4:
mknod(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$P9_RREMOVE(r0, 0x0, 0x0)

06:52:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
dup2(r0, r1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1998494a1b640753198881ee88fcefa570783e"})

06:52:40 executing program 0:
getrlimit(0x2, &(0x7f0000000080))

06:52:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$P9_RCLUNK(r0, &(0x7f0000000080)={0xfffffffffffffebb}, 0x1000003b1)

06:52:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
fcntl$getflags(r2, 0x0)

06:52:40 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
mmap(&(0x7f0000a60000/0x3000)=nil, 0x3000, 0x0, 0x9031, r0, 0x0)

06:52:40 executing program 2:
setreuid(0x0, 0xee01)
mlockall(0x1)

06:52:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000021c0))

06:52:40 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
ioctl$TIOCGLCKTRMIOS(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "459ddd09004000010100"})
fchdir(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1)
r3 = semget$private(0x0, 0x4, 0x280)
shmctl$IPC_RMID(r3, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9aec485ad7976ecb, 0x55)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0)
symlinkat(&(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00')

06:52:40 executing program 1:
setresuid(0xee01, 0x0, 0x0)
r0 = getuid()
setresuid(0xee01, r0, 0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0)

06:52:40 executing program 2:
open$dir(&(0x7f0000003bc0)='./file0\x00', 0x481042, 0x0)
lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0)

06:52:40 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$netlink(r0, 0x0, &(0x7f0000000080))

06:52:40 executing program 0:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f0000000100))

06:52:40 executing program 5:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$binfmt_script(r0, 0x0, 0x0)

06:52:40 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0x5450, 0x0)

[ 1560.886384][   T28] audit: type=1800 audit(1601275960.899:341): pid=28942 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16242 res=0 errno=0
06:52:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$P9_RCLUNK(r0, &(0x7f0000000080)={0xfffffffffffffebb}, 0x1000003b1)

06:52:40 executing program 0:
open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x5)

06:52:40 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
fchown(r0, 0x0, 0x0)

06:52:40 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x77a}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}, {0x4, 0x4bd}, {0x4, 0x101}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:40 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r0=>0xffffffffffffffff})
write$binfmt_elf32(r0, 0x0, 0x0)

06:52:40 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
dup2(r1, r0)
getsockname(r0, 0x0, &(0x7f0000000200))

[ 1560.934402][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:41 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1052c6, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb}, 0xffffff4c)

06:52:41 executing program 2:
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)

06:52:41 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000180), 0x10, 0x0}}], 0x1, 0x0)

06:52:41 executing program 1:
r0 = getpgid(0x0)
prlimit64(r0, 0xb, 0x0, &(0x7f0000000040))

06:52:41 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
dup2(r1, r0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)

[ 1561.058950][   T28] audit: type=1800 audit(1601275961.069:342): pid=28989 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16236 res=0 errno=0
06:52:41 executing program 2:
pipe2$9p(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7}, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
dup2(r2, r0)

06:52:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004)
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x8901, &(0x7f0000001100))

06:52:41 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0683d33e2ec6ad5, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

06:52:41 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
read$eventfd(r0, &(0x7f0000000140), 0x8)
write$cgroup_int(r2, &(0x7f0000000740), 0x12)
dup3(r0, r1, 0x0)

[ 1561.494192][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:41 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$VT_ACTIVATE(r0, 0x541b, 0x20000c44)

06:52:41 executing program 2:
r0 = eventfd2(0x0, 0x0)
r1 = getpgid(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1})

06:52:41 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept(r1, 0x0, 0x0)
getsockname(r2, 0x0, &(0x7f0000000080))

06:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x100)

06:52:41 executing program 3:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000100)=@abs, 0x6e)

06:52:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00')
sync_file_range(r0, 0x0, 0x0, 0x0)

06:52:41 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
listen(r2, 0x0)

06:52:41 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80)
fstatfs(r1, &(0x7f0000000100)=""/178)

06:52:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept(r1, 0x0, &(0x7f0000000080)=0xffffffffffffffe1)
connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

06:52:41 executing program 3:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8901, &(0x7f0000000880)={'netdevsim0\x00'})

06:52:41 executing program 2:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)

06:52:41 executing program 4:
open(&(0x7f0000000040)='./file0\x00', 0x52342, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x3)

06:52:42 executing program 3:
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3)

06:52:42 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = dup2(r1, r3)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x5421, &(0x7f0000000000))

[ 1561.975965][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:42 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x129000, 0x100)

06:52:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

06:52:42 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5401, 0x0)

06:52:42 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$TCSETS2(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000d000720e7332d4d68cf34e36063e43c31"})

06:52:42 executing program 0:
mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0)

06:52:42 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='tasks\x00', 0x48, 0x0)
fsync(r1)

06:52:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100))

06:52:42 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x18d46a75837f708c)

06:52:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = dup3(r0, r2, 0x0)
write$P9_RLCREATE(r3, 0x0, 0xfffffda0)

[ 1562.110035][   T28] audit: type=1804 audit(1601275962.119:343): pid=29058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16375 res=1 errno=0
06:52:42 executing program 1:
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000080), 0x0, 0x4008844, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)

06:52:42 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r0, 0x409, 0x6)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)

06:52:42 executing program 4:
r0 = semget(0xffffffffffffffff, 0x4, 0x0)
setreuid(0xee00, 0x0)
setresgid(0x0, 0xee01, 0x0)
r1 = getuid()
setreuid(0xee00, r1)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x1}})

06:52:42 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x18d46a75837f708c)

06:52:42 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r1 = dup(r0)
write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7}, 0x0)

06:52:42 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}, {0x4, 0x4bd}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:42 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x193042, 0x4b15d64f52b81d5f)

06:52:42 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0040, 0x0)
flistxattr(r0, 0x0, 0x0)

06:52:42 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$TCSBRK(r2, 0x5452, 0x440003)

06:52:42 executing program 4:
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x41, 0x0)
write$eventfd(r0, 0x0, 0x0)

06:52:42 executing program 2:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
r1 = getuid()
fchownat(r0, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x1000)

06:52:42 executing program 4:
r0 = socket(0x1, 0x5, 0x0)
fgetxattr(r0, 0x0, 0x0, 0x0)

06:52:42 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
close(r0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)

06:52:42 executing program 0:
r0 = semget$private(0x0, 0x2, 0x280)
shmctl$IPC_RMID(r0, 0x0)
r1 = semget$private(0x0, 0x4, 0x280)
shmctl$IPC_RMID(r1, 0x0)
semctl$GETPID(r1, 0x0, 0xb, &(0x7f00000000c0)=""/4096)
r2 = semget$private(0x0, 0x4, 0x280)
shmctl$IPC_RMID(r2, 0x0)
semctl$GETPID(r2, 0x0, 0xb, &(0x7f00000000c0)=""/4096)
semctl$GETPID(r2, 0x4, 0xb, &(0x7f00000000c0)=""/4096)
semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/158)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc6b18b0859f532ec, 0x0)
ptrace$setopts(0x4200, 0xffffffffffffffff, 0x8, 0x14)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000010c0)=""/208)

06:52:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x0, 0x110001)

06:52:42 executing program 4:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0)
close(r0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)
r1 = semget$private(0x0, 0x2, 0x101)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000280)=""/30)
shmctl$SHM_LOCK(r1, 0xb)
semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000000)=""/15)

06:52:42 executing program 0:
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x6, 0x7}]}, 0xc, 0x2)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
fadvise64(0xffffffffffffffff, 0x4e7, 0xffffffffffff2255, 0x3)
r3 = dup(0xffffffffffffffff)
write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7}, 0x7)
syz_open_dev$ttys(0xc, 0x2, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ftruncate(r2, 0x3ff)
pipe2$9p(0x0, 0x0)
io_setup(0x400, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xf, 0x40, 0xffffffffffffffff, &(0x7f0000000200)="27d3b454ffa01aac9f5169110d7430591101231ce768567c20c209244eb5d8bab6a8cc6c42b411ceb007f11ad5f1d5d2af20f22f55f729dd8a75109dfbdb60bc6947fccb5ab9bb7f7f883e1c6f179a6e95a6e64baa3d2411aa9cab7c6b477378668aea84ebdb441f0740dbcd0669d5fabf06b08dfe879dce6da4fefe3f3d379d5100a6d37f1868839f1a104a91bf34d2b54d6f039ac742578125d874ba5331644ac6fdbad584802c85b97df291f549b0fb8d24d1a9a844e78ccc022c779b48c1ab25c5ccc2da0763b21f6b37fc74cc33f2712502fa3bbc008d05346cbb28874268d5c12cf51bba965c648c6743cff60ff9851fe6b0f77c20a865436ff3e12d6f9ae743830a3641e32da13e32eeb40f0171b6e2196864a6faa9b119c49743c15c97bf25220c97821a57c2bc7cbe6f593b635b5e369112d9dfd36ac7d94281115ada66f8ad9015778a154e90688170e4a64afeaf742b9bb3187402338269485a25038c53c7ac36de3f32c15c821d6c09ae9c41943d742a89c6d16c8a9c2408f356634ffa8ee4141a9e73818fe107b893423803eb91eb08c04cc34acec1f27a5c1d802fb3ef17787c012c6dead23196119d6f65bd824d4a4e55a1622b7376d2c3e7498816a307735081c0f83902fa529da2953142d43b5f02b6e06283c18b710af9c1c66bf56ac4bd396bf646149eb4e2c3471f9541d6d5bc94b644bcec58b0e387508e16aaee59825022e6bcecbb348242e23ded69c87c14585ff1857363a080f1d268b4b9d3145f72b6c00d271bb358370c1f67c0055c83250fee08e432edcd83c06a468f6b6a18b8d2347bf949006f408354d8d4bf4c38d16e044dacc7f09d0b79fe53af154547536add1341f799a26b2727a83a2f03b2fe023ce6aa38f626c05768add6f185f83acdc2865f8df9daa376557f4f850ef1a514831f8bbd6775fc8a34ce464aa7873fd402673dd88de9f1c3677a5e2c3b89269dd7ea5619a40e77285ae9a85d916a56967c3032dc4bcd82edf915142aa441bd26bef6793f31efefa33c05c1eca3e2a1d1f1ac1480bf44c04630ca06bdad1c3f5e446b0068d0192c8945d96ac65702424e34374de1a160de147460c05333410f1c2513338704f62e67a70ab043cfe0c778cb2881e82fd37262f86aaef59014ec78eb2dc84fa3f5c00dce4c5cdbc0f3e0899b564cb329fcc609df50f787e78ac11d15a46eda76700a27c7d8e30a00306672ac373b61d7f10ec25c18bc13bc40f10483a1aa85b8f6392a4c49b5d1b11d0ac1beb8a41a9131891bb59f3fe8ca64cca4949cc9e09f54b5096f031065fd9807f3a4eca0fba10ebffb39a9fae1fec0fc420884d08632b3ed7e172e27940a7bbce8f95a08c32353aab8bc985ed2e7583bc22018543bd0a230d1e787fa294543b53fb6a0fe32d37327f28ecdf0c9adefa6ec9fb29e8fddddc5effa1fe17e39ae48ad49169c967a6e899146c727b514ada3a479a7ad20a489a9662b186733a3b5010756270d8525a78c60a97c46104686c129fb8cb4f2f2299539ceeed573b2c980e2be00cc7d32663de0a20f23329854a9254688affc96b04c54208a3f510938aca8da025fa35db852481530a05f1e598f57f8209bdce1c8c3767616ecd1722ff7b212abbd5eddef0359920d4f1155d62cf9c9a3eb91e715f1f362450aa901833600208de5c950e0d709e243c35c9dcf070b4150b49199ad87be4fe9be4029512ad955497b6a289eda1426515d2a47087df9cfa492feeae3ab13669289e3cb2126fe4980a64d1673188650360d081bea57395e415d65a7cffd5cc1d5179851ecc4a853dc8b2b79cfa12c69584c1c08604b1f97a03040a5f196e37bee25b91f6b431fd5ac84f8ed2776a37c40420c7561dcc0fecf673e75144ac8656b69e9f2e857b2d5100d7436b26fc603d4ab828ff227c54dbf699d975fef82b90cd57a34dba3de5c9469515c75c5c1b5e0dd73921955d2bb0d8a639a8b20fa52c6746f40e6d15b807908cab0542bbce1250b7ce65fa7e3dfdbfb60539dfcd1a6efe90f053660c8501656148ead1ed14459cdf233c2a04ca48f685c395b089fe1c54dc48c0442b4437cb18c82a870e3d60cfc7b811b56ae7b00cf346162c9275edc230f4852ca3cb173be233073ff61b2a67b544898c6bb9b126146a1cb7d878a609b0aa122defb25ff3dff7467cb3706bcb715594d2ecd2d2463bedf664db85a91ed5798c449457aa063549450aa527bd9c10c115b2d643729e7549a1ef95d2b7669874f2aa09260fc023ab19d07d995563516d999d5f665739fea51fba26ae6e453e531d79f71dbea55e30b20f0364ae0c2ea27d7801c8509b50eda06dbf0d91c1381289421abf9c893af0a26ecca7798d6bbf5010fcde8346bfbf3458efaaab799bd46664266e4ac582dc7907d9ee0c9218164af5ba750ff12edc5da023f5b83aad72ae06a7a4f0432c5158ca31ecf81256c1d1c5c3ad4de599354461fe6fac2dd6faa79cd6859385fac2464bc5b34adee79e6754c93df9d05a638216761a7bc4f7cd77e98e64880dcb22679d460cb4dbd39d9a92e204cda90d6adfb251a20c5fce16784268417a98f8c5cb97b740ab7bc355f15bd18ea0c9f4d383f6311e505bd8d2e385a77e5dd77fdc8b3a54993397f8472a663ffd3be62a90aaffac9afadef87039e4228d3f19f19baf2280bc232015b467df736110c2bfad4a1036c246f9ae2556bf755c90a02a33650aa57301b2889e205541f7b600609c455ee5136e082c9a44db4e5ddf5a8a2ad630c91cf563928af6e2b90254d49f08cb61337abb643565c078db73bba516f628a9bb71f39f63df07fb22688da68cc513687f6e444f06552ef78dcb3dca909e78002010c053fc3ce525cad435499b3492135624b1dbdf3af463d9caa36b2935357f2abbb74af833f78cb3d75b1dd150e2e19b52518114a3d1c5d719cfe66137f1ddffc261c407efcbd33a285e6ddf0ee26e0d9502ec7048729526f8ca930cfc138a015b760590525f5f3f58a472319c9463b30aa2f4321a651a289fe11bdd611d6e6008566c248d4326b6f4d37af7e7f07ab829db08999208fc271d77461bf4b7ff37f46e67cab3e83d02e7eb15e9dc12faed5ce99a377b38397b41c7d9bb8a7cc2e84a86cf75c62794319587ce0fa9e4fcef276223c6a004fdf077a7b3054107dec5d186ea16b2ddd2413c1f0c92b763d7a75d433ba1fd1112bacee1c8973f33d01fe8fbbffe66662bc60101fd79d4f757aadb8a5c3852a10b840599c826044c7c0162c6c9e21a20aed8e9cbc23776e56964d2f664bd964aaf31b41a876f3a2b24de8374b842f679956314ff691bb5a9e04d9bf048ceaf7ca258ddae5920254ab8214873ea7ad79d4bd310d914f69f0289a47d207dc3184bedc3c7666f94a929da6067d67681dcad571ee638fe76ad236f007c582482acdfbb78318dcc30c38fb7bb63a59e5e9afdea8ad7e76c19afeae90d9840474abe398fab50cf5af27516778420e4e1e151d16826b727e27a667a195dd3197f3fafaa4a2170bf8959aecc65b9024787d82e7f885f014a57605f614e911cdb250f6d72432ed1dc493ff7c2195ab91fcbc9d242530a70df5254ec8e28e37de1184a3331a479956b9c185005b074a03f1ce73f355a1de8ea38c0e1757ff6ccd6fc2fb2830c22948ee2c8602090eb68725a33b5917d07cf5aa75c72929a8312d28b0d71edf76090ef8ff793b5d9f10dffec75a3c547769e17498dc238a0dcd31443257f3b7716768bf25a3c1e2d455bb818a1baa50fc52ed547c0779ac53cb1f8fb2a63927460eecc9a26788b2331723060044e7009d3d69f6ccb13318d4cce4015d6d13014e3456ae4582d29fc44839de0999a1d78d85fc300e786d8d972371526fc567c09f817c3055387c4ea21a44f4e0c72d6614ef4eba7715a29849f840ae119e12aa6a5d647665c185ea9430f84a5e8e7aa753b09e7c62552e2af7634434746f20bbd94c24a8aecd1af76637a3d66ee71d7734a01636b360d5ce4d7e6c3f5ccec2d35d1b59bff79d8b04b417da6edbf0d84d43831a1219a3c47c7fe2ea4144744d85c3be987f1d68042a2738ed2d0e1639db408628e6954fefb60a57b6a283f16bf595d00564d4dca3e3a0393ad065d562e1450e248c3793f9573004bb075befc59d6b3efa63471eb9c6958a16a3bf19408f5995047e85fd068c8bf21baff0f70e0d8d7822fbf9215cb52c5c0b8caed741d1335bc6a61835ab6ce6964f15108e587d1304ebf67aa1161393158bda703a9ad8ae0210649a276f6d55689d8c1eadc3e4e92dcc11c7af111e4e83512698c07cba58e8d32610636f16c318346cf54227755d5fa64da3b3bda76d06b1634a9286a3274bcb4c4f156eb0d598ce96d0688cbf8f3f98acd1a027315f72f6eac244c748c372c1cfc5edb2751682ca2b65b3150b3a6147ad1196c4592810dfa6de68997d2cd0b4becde54b9362064971d1423180749640ea6c96aaf6000e49841577470cd323739272ec33a34f6da9fdcb8e05240a8efc5112399d080eb7295f42b506961a61e86f2b704762f8c2b2c77adef9b699688e04f7c05aa69c6bf0e30a2c4c86766fecbad81cab6a825ea03de3a28eb3399b1beb49d91880c2a218da31bade54cf005867fef34d6adfb2a53d81aa61e0e69accb3cb22d9a284796e9dd105ae6122532398c3fac8e6ea3285af93abc2caeeae9718a9e203335efcf73e069619b5fa5a90b5c6104055cade582128b1522524a37b2084cb6410ca1a8cae5efdcfa0aedefa10c173387029a0200788d4ef31a528e826904ad746a60ecc28badf5b69bbd9dda9033fc1bbbd6c445316ff2473ca5179628be8ddb2ca06dcb859eeb965218acdf34a4265f8746d4ea653d74aa5282de26b30fef0e8ba2adc85eda4db49a724a016f4d6b61ceaf8f96ed38f3ac955b2e005d8309b6f9ae5efc1deb4b9393dc14f2353e67765fe530d74d57521e1577cd3c1977c004ca4bc2e06124584d4c15e27527e433049847ea973c9f7584a93ca649f86b7bae2f4f6566457c13abb76eb1951b0d1af6594a0295e95e0133bda444f1db920aff442f5bf3386d57cf525b454af4e544feacaad1207cc5f142cb9e6500a57dc24d46a55b9c95bc28a002835071648f438b97868a7aa5c22e2b9cd7aefc1c0d39186f37bc6b8c8048f471a784ef88a00609a5fda7bc26ae155b8c96227805dc1e72ec16fd08fe59da34bbe969dc878fa98b24a999dad21e5ad48a5ba369e937273c46b6a5811eb1a1f0e17e9fca759e274076b8455413803af16aaefd2b2acb930de2cc99ed8d76d0d679a0971aeeb24c4fe75e456c1030f352dd07dacbcbafedd787347d722eb1d82f504ca0f46adcb1f4fb94eb9fa9517698f63bdaf398c1b4b3f00aeddec28d08d72ab7b3a8f10cd1ab2a5a7bdd1425078d32404ef10120a784cd08584338be1668aaac6ff2739658b3253e332a3d61588b69040a09e8867d5118ce28743c1abb4e32d124e4efea54603870f923a74bda3709bf5e8d3392196bd32e70578b00a84040cf113b3bb88b97cb9792a5a648ace7ef6b191f8db8d34be975619815984974f135918ed919d16b10d1a90f84038c3c8ef3ab72294dc0b63ccd648fbabf0855c269fcaf812cce29d658c72e0e5da4cc536ff108df131291a1537ad1021936d6bf08799d6f16d75ed4b711db5d8fce0d8b8146cfd96c8d68e04529cb0afbd7556b89d71f7fe1ff751e6c1ee2afa36c2aa22e6363f459eb3d97a95d3a79f716111b304d4a41042383537", 0x1000, 0x8, 0x0, 0x3}])
mlock(&(0x7f00007fd000/0x800000)=nil, 0x800000)

[ 1563.014197][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x5450, 0x0)

06:52:43 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r2, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept$unix(r1, 0x0, 0x0)

06:52:43 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x69)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x400, &(0x7f0000000080))
r1 = socket$netlink(0x10, 0x3, 0x0)
getpeername(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000240)=0x80)
setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'd\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x8, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$NS_GET_PARENT(r4, 0x541b, 0x73b000)
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000400)=""/136)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r5 = semget$private(0x0, 0x3, 0x6fe)
shmctl$IPC_RMID(r5, 0x0)

06:52:43 executing program 2:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
r3 = dup(r0)
ioctl$sock_SIOCINQ(r3, 0x541b, 0x0)

06:52:43 executing program 4:
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$getflags(r0, 0x408)

06:52:43 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0)
write$P9_RVERSION(r0, 0x0, 0x0)

06:52:43 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
write$P9_RMKDIR(r0, 0x0, 0x0)

06:52:43 executing program 0:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
splice(r1, &(0x7f0000000000), r0, 0x0, 0x0, 0x1)

06:52:43 executing program 3:
r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x800, &(0x7f0000000200))

06:52:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0)

06:52:43 executing program 1:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)

06:52:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = syz_open_pts(r0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))

06:52:43 executing program 4:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)
fchmod(r0, 0x0)
r1 = eventfd(0x0)
fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
syz_open_procfs$namespace(0x0, 0x0)

06:52:43 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f00000002c0)={0x0, 0xfea0})

[ 1563.256506][   T28] audit: type=1804 audit(1601275963.269:344): pid=29140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16380 res=1 errno=0
[ 1564.064158][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:44 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = inotify_init()
r2 = inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x64000001)
r3 = dup(r0)
inotify_rm_watch(r3, r2)

06:52:44 executing program 2:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
splice(r1, &(0x7f00000000c0), r0, 0x0, 0x0, 0x7)

06:52:44 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x101)

06:52:44 executing program 0:
r0 = eventfd(0xdffffffe)
r1 = gettid()
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0)
tkill(r1, 0x13)

06:52:44 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a1a40, 0x2a0)

06:52:44 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
setsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0)

[ 1564.121272][   T28] audit: type=1804 audit(1601275964.129:345): pid=29146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="file0" dev="sda1" ino=16234 res=1 errno=0
06:52:44 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = dup3(r0, r2, 0x0)
write$P9_RREAD(r3, 0x0, 0x0)

06:52:44 executing program 4:
statx(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setregid(r0, 0x0)

06:52:44 executing program 3:
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x7639d87170bc6756, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

06:52:44 executing program 2:
mount$9p_tcp(&(0x7f00000010c0)='127.0.0.1\x00', &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='9p\x00', 0x0, 0x0)

[ 1564.177149][   T28] audit: type=1804 audit(1601275964.189:346): pid=29162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16233 res=1 errno=0
06:52:44 executing program 0:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

06:52:44 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140), 0x0)

06:52:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8903, 0x0)

06:52:44 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0x10000)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)

06:52:44 executing program 3:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0x5452, &(0x7f0000000080))

06:52:44 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
dup3(r0, r1, 0x0)
pwritev(r1, 0x0, 0x0, 0x0, 0x0)

06:52:44 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103741, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x600, 0x61f96d357f19dc6a)

06:52:44 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)

06:52:44 executing program 5:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0)
ioctl$CHAR_RAW_ROSET(r0, 0x125d, 0x0)

06:52:44 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8)

06:52:44 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0xfffffffffffffe18)

06:52:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80)
fcntl$getflags(r1, 0x0)

[ 1564.534911][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1565.104292][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:45 executing program 0:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

06:52:45 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syncfs(r0)

06:52:45 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:52:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0)

06:52:45 executing program 1:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
dup3(r1, r0, 0x0)
signalfd4(r0, &(0x7f00000000c0), 0x8, 0x0)

06:52:45 executing program 3:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x1000, 0x40, &(0x7f0000002780))

06:52:45 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
r2 = dup3(r1, r0, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

[ 1565.414103][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:45 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7)

06:52:45 executing program 1:
r0 = epoll_create(0x40000acf)
close(r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x63d436c754a47f67, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

06:52:45 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffdb0)

06:52:45 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syncfs(r0)

06:52:45 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80)
dup3(r0, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
getsockopt$sock_buf(r4, 0x1, 0x3, &(0x7f0000000240)=""/209, &(0x7f0000000200)=0xd1)

[ 1566.134291][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:46 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')

06:52:46 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCGETD(r0, 0x5452, &(0x7f00000002c0))

06:52:46 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r0, &(0x7f0000000200)="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", 0xe63b0000, 0x0)

06:52:46 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
sendmsg(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x8000)

06:52:46 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, 0x0, 0x0)

06:52:46 executing program 2:
r0 = semget(0xffffffffffffffff, 0x4, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))

06:52:46 executing program 2:
r0 = eventfd2(0xfffffffffffffffc, 0x800)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)

06:52:46 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0xd0b6fd660cc1bfe, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

06:52:46 executing program 2:
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$VT_GETMODE(r0, 0x5601, 0x0)

06:52:46 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4)

[ 1566.332451][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 1566.332462][   T28] audit: type=1804 audit(1601275966.339:349): pid=29249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16178 res=1 errno=0
06:52:46 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x1be2, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0)

06:52:46 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket(0x1, 0x803, 0x0)
socket(0x1, 0x0, 0x0)
listen(r1, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r2)
syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
lseek(r2, 0x0, 0x0)

06:52:46 executing program 4:
r0 = creat(&(0x7f0000000900)='./file0\x00', 0x0)
ioctl$CHAR_RAW_RAGET(r0, 0x1263, 0x0)

06:52:46 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)

[ 1566.406616][   T28] audit: type=1804 audit(1601275966.349:350): pid=29255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16178 res=1 errno=0
06:52:46 executing program 0:
prlimit64(0x0, 0x0, 0x0, &(0x7f0000000000))

06:52:46 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r0, r1)
r4 = dup2(r2, r3)
write$P9_RLCREATE(r4, 0x0, 0x0)

06:52:46 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = dup2(r1, r0)
r3 = accept(r2, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x5450, 0x0)

06:52:46 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x78dd}], 0x1)
semop(r0, &(0x7f0000000280)=[{0x4, 0x8}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x401}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:46 executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='tasks\x00', 0x48, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)

06:52:46 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
r2 = dup3(r0, r1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e)

06:52:46 executing program 4:
r0 = socket$unix(0x1, 0x800000000005, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

06:52:46 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={<r1=>0xffffffffffffffff})
ioctl$FS_IOC_GETVERSION(r1, 0x5452, &(0x7f0000000000))

06:52:46 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004300)='/dev/full\x00', 0x0, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

06:52:46 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x5450, 0x0)

06:52:46 executing program 0:
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0xee00, r0)
r1 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT(r1, 0x0, 0x10, 0x0)

06:52:46 executing program 3:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$P9_RRENAME(r0, 0x0, 0x0)

06:52:46 executing program 0:
symlink(&(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0)='./file0\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:46 executing program 2:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5451, 0x0)

06:52:46 executing program 5:
setgroups(0x0, &(0x7f0000001a00))

[ 1566.703691][   T28] audit: type=1804 audit(1601275966.709:351): pid=29309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file1" dev="sda1" ino=15862 res=1 errno=0
[ 1566.730533][   T28] audit: type=1804 audit(1601275966.739:352): pid=29312 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file1" dev="sda1" ino=15862 res=1 errno=0
[ 1567.174263][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:47 executing program 1:
r0 = open$dir(&(0x7f0000003bc0)='./file0\x00', 0x4150c2, 0x0)
syncfs(r0)

06:52:47 executing program 0:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000040))

06:52:47 executing program 3:
clock_nanosleep(0x3, 0x0, &(0x7f0000000000), 0x0)

06:52:47 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$FIBMAP(r2, 0x5421, &(0x7f0000000040))

06:52:47 executing program 5:
mknod(&(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0)

06:52:47 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
write$P9_RWRITE(r0, 0x0, 0x0)

06:52:47 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

06:52:47 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x181002, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)

06:52:47 executing program 4:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
ioctl$FIONCLEX(r0, 0x5450)

06:52:47 executing program 1:
open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
getgroups(0x1, &(0x7f00000001c0)=[<r0=>0xee01])
fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, r0, 0x0)

06:52:47 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4)

06:52:47 executing program 2:
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000340)=0x80)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000600)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000001b00))
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)
r5 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0x5452, &(0x7f0000001780)=ANY=[])
shutdown(0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x385103, 0x8)
r6 = semget$private(0x0, 0x4, 0x200)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000000)=""/166)

06:52:47 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0)

06:52:47 executing program 4:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
ioctl$FIONCLEX(r0, 0x5450)

06:52:47 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
dup2(r1, r0)
setsockopt(r0, 0xfffff175, 0x0, 0x0, 0x0)

[ 1567.514609][   T28] audit: type=1804 audit(1601275967.529:353): pid=29334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file1" dev="sda1" ino=16067 res=1 errno=0
06:52:47 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = dup3(r1, r0, 0x0)
r3 = accept4$unix(r2, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(r3, 0x5451, 0x0)

[ 1567.566756][   T28] audit: type=1804 audit(1601275967.549:354): pid=29334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file1" dev="sda1" ino=16067 res=1 errno=0
[ 1567.588859][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:47 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
write$P9_RXATTRCREATE(r0, 0x0, 0x0)

06:52:47 executing program 1:
setitimer(0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000080))

06:52:47 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
fcntl$lock(r0, 0xf, &(0x7f0000000200))

06:52:47 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2600000007020019007b3adea82f463a6574683173646c696e757847524c5c3a73656c696e75"], 0xfffffc6a)
write$P9_RMKNOD(r1, &(0x7f00000001c0)={0x14}, 0x14)
dup2(r1, r0)

06:52:47 executing program 3:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
write$P9_RATTACH(r0, &(0x7f0000000200)={0x14}, 0xffffff1c)
write$P9_RSTAT(r0, &(0x7f0000000040)={0x7f, 0x7d, 0x0, {0x0, 0x78, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3, ':-&', 0x1e, 'posix_acl_accesscpusetcpuset[^', 0x1a, 'selfsecuritybdev:vboxnet0[', 0xa, '/dev/zero\x00'}}, 0x7f)

[ 1567.616099][   T28] audit: type=1804 audit(1601275967.619:355): pid=29349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file1" dev="sda1" ino=16276 res=1 errno=0
06:52:47 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:52:47 executing program 1:
setrlimit(0x7, &(0x7f0000000000))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0)

[ 1568.214406][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:48 executing program 2:
open$dir(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd/3\x00')
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:48 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RRENAME(r0, 0x0, 0x0)

06:52:48 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x10)

06:52:48 executing program 5:
open$dir(&(0x7f0000000040)='./file0\x00', 0x6d3a41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x280500, 0x100)

06:52:48 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
r2 = dup2(r1, r1)
write$P9_RVERSION(r2, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
dup2(r3, r1)
tkill(r0, 0x1000000000016)

06:52:48 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
syncfs(r0)

06:52:48 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
getsockopt(r0, 0x1, 0x3, &(0x7f0000000040)=""/43, &(0x7f00000011c0)=0x2b)

06:52:48 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x5450, 0x0)

06:52:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x4000000)

06:52:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f00000000c0))

06:52:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0)

06:52:48 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x56cac1, 0x0)
chown(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)

06:52:48 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00')
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0)

06:52:48 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
write$P9_RUNLINKAT(r0, 0x0, 0x0)

06:52:48 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8912, &(0x7f0000000040))

06:52:48 executing program 5:
r0 = eventfd(0x80008003)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RWALK(r1, &(0x7f0000000680)={0x9}, 0x9)

06:52:48 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
write$P9_RLERROR(r2, &(0x7f00000000c0)={0xffffffd9, 0x7, 0x0, {0x2c2, '8\xad\x8f\xe4\x12[\xf2\v\xa6\xde\x87\xc6\xfe\xf2\x8d\xde*\xe9e\x80H\xcf\xfdo\x1b\xb77\x00\x01\x00\x00\x00\x00\x00\x00r\xe2<\xb9q-&v\x94\x80\xa7[\x06\xbd'}}, 0xfffffe9a)

06:52:48 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
write$nbd(r0, 0x0, 0x0)

06:52:48 executing program 0:
nanosleep(&(0x7f0000005540)={0x0, 0x3938700}, 0x0)

06:52:48 executing program 3:
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f00002b9000/0x1000)=nil)
semctl$GETPID(r0, 0x0, 0xb, 0x0)

06:52:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000000)={0x3, 'wg0\x00'})

06:52:48 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42040, 0xba)

06:52:48 executing program 4:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

06:52:48 executing program 3:
open$dir(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000), 0x2, 0x0)
write$P9_RXATTRWALK(r1, 0x0, 0x0)

06:52:48 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x1}, {0x4, 0x71af}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:48 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0)

06:52:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), 0x4)

[ 1568.658734][   T28] audit: type=1804 audit(1601275968.669:356): pid=29432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="file0" dev="sda1" ino=16132 res=1 errno=0
[ 1568.689174][   T28] audit: type=1804 audit(1601275968.699:357): pid=29435 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="file0" dev="sda1" ino=16132 res=1 errno=0
06:52:48 executing program 5:
inotify_init()
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x0, @multicast2}})
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4)
connect$unix(r3, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0x5450, 0x0)

06:52:48 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
r1 = dup(r0)
openat$cgroup_procs(r1, &(0x7f0000000040), 0x2, 0x0)

06:52:48 executing program 0:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = dup(r0)
sendfile(r3, r4, 0x0, 0x0)

06:52:48 executing program 3:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TIOCSTI(r0, 0x5421, 0x8093dd)

06:52:48 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)

06:52:48 executing program 0:
r0 = epoll_create(0x1)
ioctl$TCSETSW(r0, 0x5450, 0x0)

06:52:48 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$PIO_UNIMAPCLR(r3, 0x541b, 0x0)

06:52:48 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf3f61, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x31)

06:52:48 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x5451, 0x0)

[ 1568.786954][   T28] audit: type=1804 audit(1601275968.799:358): pid=29448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=15846 res=1 errno=0
[ 1569.254193][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:49 executing program 1:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETVERSION(r0, 0x5452, &(0x7f0000000180))

06:52:49 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

06:52:49 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r0, r1)
recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)

06:52:49 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040), 0x2, 0x0)
writev(r2, 0x0, 0x0)

06:52:49 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0)
fdatasync(r0)

06:52:49 executing program 0:
r0 = inotify_init()
r1 = dup2(r0, r0)
ioctl$BTRFS_IOC_SCRUB(r1, 0x5451, 0x0)

06:52:49 executing program 4:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0)

06:52:49 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

06:52:49 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0)
fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0)

06:52:49 executing program 3:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x2c0001, 0x0)

06:52:49 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
write(r0, &(0x7f0000000040)="16", 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x10000)
lseek(r0, 0x0, 0x0)
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0xffffffffffffff81)

06:52:49 executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0)

06:52:49 executing program 1:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
fcntl$setsig(r0, 0x406, 0x0)

06:52:49 executing program 5:
clock_getres(0x3, &(0x7f00000001c0))

[ 1570.304142][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000005c0))

06:52:50 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000200)="86", 0x1, 0x4000015, &(0x7f0000000280)=@nl, 0x80)

06:52:50 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)

06:52:50 executing program 1:
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20553042, 0x0)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup2(r0, r1)
pread64(r2, 0x0, 0x0, 0x0)

06:52:50 executing program 5:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

06:52:50 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$FICLONERANGE(r1, 0x5452, &(0x7f0000000080))

06:52:50 executing program 3:
r0 = getgid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000300)=0xc)
setresgid(r2, 0xee01, r0)

06:52:50 executing program 1:
lremovexattr(0x0, 0x0)

06:52:50 executing program 4:
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000))

06:52:50 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x541b, 0x0)

06:52:50 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r3 = dup2(r1, r2)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

06:52:50 executing program 3:
r0 = epoll_create(0x34)
r1 = dup(r0)
epoll_wait(r1, 0x0, 0x0, 0x0)

06:52:50 executing program 5:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000001cc0)={0x2, @ethernet={0x0, @random="42358dc56816"}, @ethernet={0x0, @broadcast}, @tipc})

06:52:50 executing program 0:
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
readlink(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

06:52:50 executing program 0:
r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xe2\x97\xb4\t\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
write$cgroup_pid(r0, &(0x7f0000000040), 0x12)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000140), 0xa601)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0)

06:52:50 executing program 3:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x82042, 0x0)
write$char_raw(r0, 0x0, 0x0)

06:52:50 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000040)={'ipvlan1\x00'})

[ 1570.623719][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:50 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xd40c1, 0x3)

06:52:50 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x5450, 0x0)

06:52:50 executing program 4:
symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:50 executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

06:52:50 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0)
r1 = epoll_create1(0x0)
r2 = dup3(r0, r1, 0x0)
fdatasync(r2)

[ 1571.334993][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:51 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, &(0x7f0000000100))

06:52:51 executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

06:52:51 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$TIOCGDEV(r0, 0x5450, 0x0)

06:52:51 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)

06:52:51 executing program 0:
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
mkdirat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x1ff)

06:52:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$KDSKBLED(r2, 0x5401, 0x20002009)

06:52:51 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/full\x00', 0x480001, 0x0)
write$P9_RLERRORu(r0, 0x0, 0x0)

06:52:51 executing program 3:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$P9_RFSYNC(r0, 0x0, 0x0)

06:52:51 executing program 4:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, 0x0)

06:52:51 executing program 2:
r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0)
write(r0, &(0x7f0000000000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
llistxattr(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0)

06:52:51 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r4 = dup3(r1, r3, 0x0)
r5 = accept4$unix(r4, 0x0, 0x0, 0x0)
write$binfmt_misc(r5, 0x0, 0x0)

06:52:51 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb05891c10e81863, 0x84)

06:52:51 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x0, @broadcast}})

06:52:51 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)

06:52:51 executing program 4:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$VT_ACTIVATE(r0, 0x5606, 0x0)

06:52:51 executing program 5:
r0 = inotify_init1(0x0)
r1 = creat(&(0x7f0000001280)='./file0\x00', 0x0)
r2 = dup2(r1, r0)
write$binfmt_elf32(r2, 0x0, 0x0)

06:52:51 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0)

06:52:51 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r1, &(0x7f0000000100)=0xfffffffffffffffd, 0x8)
sendfile(r1, r1, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000004, 0x12, r1, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
tkill(r0, 0x13)

06:52:51 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f0000000040)={0x3, 'veth1_macvtap\x00'})

06:52:51 executing program 1:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {r2, r3+60000000}}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setuid(r4)
r5 = gettid()
tkill(r5, 0x13)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:52:51 executing program 2:
setrlimit(0x7, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00')

06:52:51 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0)

06:52:52 executing program 3:
clone(0x4a1cd300, 0x0, 0x0, 0x0, 0x0)

06:52:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
sync_file_range(r1, 0x0, 0x0, 0x0)

06:52:52 executing program 2:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
write$P9_RSYMLINK(r0, 0x0, 0x0)

06:52:52 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), 0x4)

06:52:52 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
setxattr$security_ima(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0)

[ 1572.374143][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:52 executing program 3:
r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000580)='./file2\x00', 0x4, 0x0)

06:52:52 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
write$cgroup_freezer_state(r2, 0x0, 0x0)

06:52:52 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
dup2(r1, r0)
signalfd4(r0, &(0x7f0000000100), 0x8, 0x0)

06:52:52 executing program 4:
pselect6(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0)

[ 1573.414160][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1573.654964][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1574.454188][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:54 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f0000000080)='veth0_vlan\x00')

06:52:54 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='+\x00\xb1J\xe5\x03\xfb\xfc\x9c\xcc8,F\xe1-\xf1\xbb\x9a|\xd4\xc3\xa5 \xae\xad\x139\xa8\x1e\xda\xb6UWY2;\x8eZ\xbf\x9e\x17(\xfc\xbaP\x86\v\xa1\xd7}\xa4!\xdb\a\'D\xb5p\xads?_\x01\x11\xe6\x18\xe9\xb4\x1at\x8b:\xd3L\xa6v\xdb\xd0\xbbz\x1f\xe20\xa0\x9c^\x0f*y\xa8`z\xdbl\x8a\xc7\ro*\xc3\xcd\xc3+Z\xa1\xb6\xd9oQL\b )b?(\xdc', 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = dup3(r0, r1, 0x0)
pwritev(r2, 0x0, 0x0, 0x0, 0x0)

06:52:54 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))

06:52:54 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$TCSETX(r1, 0x541b, 0x0)

06:52:54 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$NS_GET_OWNER_UID(r1, 0x5450, 0x0)

06:52:54 executing program 5:
readlink(&(0x7f0000000280)='.\x00', 0x0, 0x0)

06:52:54 executing program 3:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
syncfs(r0)

06:52:54 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}, {0x4, 0x46}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71b1}, {0x4, 0x6}, {0x4, 0x4ba}], 0x3)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:54 executing program 2:
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00')
lsetxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'U+', 0xff}, 0x16, 0x2)
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/246, 0xf6)
mknod(0x0, 0x0, 0x0)
r0 = semget$private(0x0, 0x4, 0x0)
r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x501501, 0xae)
lgetxattr(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@known='system.posix_acl_default\x00', &(0x7f0000000580)=""/71, 0x47)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x2a)
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x8022)
creat(&(0x7f0000000880)='./file0\x00', 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
shmctl$SHM_UNLOCK(r0, 0xc)

06:52:54 executing program 4:
r0 = semget$private(0x0, 0x8, 0x0)
semctl$GETVAL(r0, 0x3, 0xc, 0x0)

06:52:54 executing program 1:
r0 = epoll_create1(0x0)
fcntl$notify(r0, 0x0, 0x14)

06:52:54 executing program 3:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
fstatfs(r0, 0x0)

06:52:54 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r1, r0, 0x0)
r2 = accept(r0, 0x0, 0x0)
sendto(r2, &(0x7f0000001800)='u', 0x1, 0x0, 0x0, 0x0)

06:52:54 executing program 1:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c1, 0x0)
connect$unix(r0, 0x0, 0x0)

06:52:54 executing program 3:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0)
read$char_raw(r0, 0x0, 0x0)

06:52:54 executing program 4:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x201, 0x0)
write$P9_RMKNOD(r0, 0x0, 0x0)

06:52:54 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
write$P9_RUNLINKAT(r2, 0x0, 0x0)

06:52:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x26e1, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)

06:52:54 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000001a00)='ns\x00')
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

[ 1575.015091][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1575.494221][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:55 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$NS_GET_PARENT(r0, 0x5421, 0x748000)

06:52:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x5452, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0})

06:52:55 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x326c70ab1540b5d3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x6)

06:52:55 executing program 1:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f00000001c0)=""/4096)

06:52:55 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000006480)='./file0\x00', 0x1b40, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')

06:52:55 executing program 5:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RAUTH(r0, 0x0, 0xfffffffffffffcf4)

06:52:55 executing program 2:
r0 = memfd_create(&(0x7f00000000c0)='ppp1\x00', 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

06:52:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
close(r0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

06:52:55 executing program 4:
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
write$P9_RLERROR(r0, &(0x7f0000000080)={0xb, 0x7, 0x0, {0xfffffffffffffdd4, 'C#'}}, 0x557dca2d)
write$P9_RLOCK(r0, &(0x7f00000002c0)={0x8}, 0x8)

06:52:55 executing program 3:
r0 = gettid()
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
r4 = dup(r1)
ioctl$TIOCGSERIAL(r4, 0x541b, 0x0)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x13)

06:52:55 executing program 0:
r0 = inotify_init1(0x0)
ioctl$TCXONC(r0, 0x5450, 0x2)

06:52:55 executing program 2:
r0 = memfd_create(&(0x7f00000000c0)='ppp1\x00', 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

06:52:55 executing program 2:
rmdir(&(0x7f0000000240)='.\x00')

06:52:55 executing program 1:
r0 = open$dir(&(0x7f0000001cc0)='./file0\x00', 0x301441, 0x0)
pwritev2(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2)

06:52:55 executing program 0:
r0 = memfd_create(&(0x7f0000000240)='-B\xd5N\xb0I\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb\xb5\x9d1\x1bQ9mOd\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xab +\xd5\xa9\x8f\a\xa9\b\x8b\x9bz\x15\xb6\x1buN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

06:52:55 executing program 3:
r0 = gettid()
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
r4 = dup(r1)
ioctl$TIOCGSERIAL(r4, 0x541b, 0x0)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x13)

06:52:55 executing program 4:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
openat$cgroup_subtree(r2, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)

06:52:55 executing program 5:
r0 = inotify_init1(0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETX(r0, 0x5450, 0x0)

06:52:55 executing program 2:
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0)
r1 = epoll_create(0x7)
pipe2(&(0x7f0000001180)={<r2=>0xffffffffffffffff}, 0x0)
r3 = eventfd(0x0)
writev(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)="979266dedc556be6", 0x8}], 0x1)
fcntl$dupfd(r3, 0x0, r3)
write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff, 0x7d, 0xfffffffffffffffe, 0x0, 0x0, 0x3a, 0x200000000, 0x8c6b}}, 0x43)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x5450, 0x0)
r4 = epoll_create(0x7)
ioctl$sock_SIOCGIFCONF(r4, 0x5450, 0x0)
splice(r1, &(0x7f0000000000)=0x3, r4, &(0x7f0000000040)=0x7fffffff, 0x3, 0xa)
r5 = epoll_create(0x7)
r6 = semget$private(0x0, 0x4, 0x593)
shmctl$IPC_SET(r6, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x7, 0x3, 0x9, 0x40, 0x0, 0x0, 0x200})
semctl$GETPID(r6, 0x3, 0xb, &(0x7f0000000100)=""/151)
semctl$SEM_STAT_ANY(r6, 0xf320b3f55fd1ba30, 0x14, &(0x7f0000000140)=""/4096)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000100)={{0x3, 0x0, @identifier="d78e4acb3f2af78624a8f6f30bac0366"}})
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x5450, 0x0)
splice(r1, &(0x7f0000000080)=0x1, r5, &(0x7f00000000c0)=0x2, 0x400, 0x3)

06:52:55 executing program 0:
getitimer(0x5, 0x0)
setreuid(0xee00, 0x0)
stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, r0, 0x4, 0x5}, 0x1f, 0xf4d7, 0x0, 0x0, 0x0, 0x0, 0x8})
lsetxattr$system_posix_acl(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x6}, [{0x2, 0x4}, {0x2, 0x3}, {0x2, 0xf}], {0x4, 0x4}, [{0x8, 0x5}, {0x8, 0x5}], {0x10, 0x7}, {0x20, 0x1}}, 0x4c, 0x0)
r1 = semget$private(0x0, 0x4, 0x200)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000540)=[0x2])
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/166)
semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000180)=""/156)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000400)=""/117)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FS_IOC_MEASURE_VERITY(r3, 0x8903, &(0x7f0000000080)=ANY=[@ANYBLOB="1a4cfaae8973ffe36600"])
statx(r4, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresgid(0xee01, r5, 0xffffffffffffffff)
r6 = getuid()
setreuid(0xee00, r6)
stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r2, r5, r6, r7, 0x4, 0x5}, 0x1f, 0xf4d7, 0x0, 0x0, 0x0, 0x0, 0x8})
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r7, 0x800)

06:52:55 executing program 1:
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x841, 0x0)
write$eventfd(r0, 0x0, 0x0)

06:52:55 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0)

06:52:55 executing program 4:
semget(0x1, 0x1, 0x202)

06:52:56 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = getuid()
fchown(r0, r1, 0x0)

06:52:56 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$TCSETSF2(r2, 0x541b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cb60dc00"})

06:52:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
ioctl$CHAR_RAW_RESETZONE(r0, 0x40101283, 0x0)

06:52:56 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x848003, 0x0)
write$P9_RRENAMEAT(r0, 0x0, 0x0)

06:52:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x8041, 0x0)
futimesat(r0, 0x0, 0x0)

06:52:56 executing program 2:
open(&(0x7f0000000040)='./file0\x00', 0x422042, 0x93)

[ 1576.043613][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 1576.043636][   T28] audit: type=1804 audit(1601275976.049:361): pid=29747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16234 res=1 errno=0
06:52:56 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCGLCKTRMIOS(r2, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "13000000000000000000000000002000"})

06:52:56 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000008fc0)={0x77359400})

06:52:56 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x848003, 0x0)
write$P9_RRENAMEAT(r0, 0x0, 0x0)

06:52:56 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)

[ 1576.107598][   T28] audit: type=1804 audit(1601275976.079:362): pid=29747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16234 res=1 errno=0
[ 1576.151501][   T28] audit: type=1804 audit(1601275976.159:363): pid=29760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16254 res=1 errno=0
[ 1576.534082][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x5450, 0x0)

06:52:56 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

06:52:56 executing program 0:
r0 = eventfd(0xfffffffc)
write$char_usb(r0, &(0x7f0000000240)="c626793c4c01f78c", 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
close(r0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00')
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:52:56 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001300)='/dev/null\x00', 0x0, 0x0)
fdatasync(r0)

06:52:56 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r0)

06:52:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
flock(r0, 0x2)

[ 1576.704000][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:56 executing program 4:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000500)={0x0})

06:52:56 executing program 1:
r0 = eventfd(0x0)
write(r0, &(0x7f0000000000)="abbefe935e3d03ef", 0x8)
write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "bc78857d"}, 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:52:56 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8901, &(0x7f00000001c0)={'erspan0\x00', @ifru_data=0x0})

06:52:56 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
fcntl$notify(r0, 0x0, 0x100010004)

06:52:56 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
write$cgroup_pid(r0, 0x0, 0xfd00)

06:52:56 executing program 2:
semget(0xffffffffffffffff, 0x3, 0x420)

06:52:56 executing program 4:
r0 = socket(0x1, 0x5, 0x0)
r1 = fcntl$getown(r0, 0x9)
getpgrp(r1)

06:52:56 executing program 2:
r0 = semget$private(0x0, 0x1, 0x110)
semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/190)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = semget$private(0x0, 0x6, 0x0)
semctl$IPC_INFO(r2, 0x1, 0x10, 0x0)
r3 = semget$private(0x0, 0x4, 0x163)
semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000280)=""/77)
semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f00000001c0)=""/23)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$KDENABIO(r4, 0x4b36)
semget(0x3, 0x0, 0x2d0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = dup(r6)
dup3(r5, r7, 0x0)
ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000180))
modify_ldt$write(0x1, &(0x7f00000000c0)={0xfa64, 0xffffffffffffffff, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0xc0100, 0x0)
shmctl$SHM_UNLOCK(r0, 0xc)

06:52:56 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = dup(r0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040))

06:52:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
read$char_usb(r2, 0x0, 0x0)

06:52:56 executing program 2:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)
r2 = dup(r1)
ioctl$TCSETSW2(r2, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "373dac589594f755000000007fd4a5b52e175c"})

06:52:57 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mbind(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040), 0x9, 0x0)

06:52:57 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
close(r0)

06:52:57 executing program 1:
clock_getres(0x4, &(0x7f0000000180))

06:52:57 executing program 4:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$P9_RLERROR(r0, 0x0, 0x0)

06:52:57 executing program 3:
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42420}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000440)=0x80)
readv(r1, 0x0, 0x0)

06:52:57 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x40000041, &(0x7f0000010f40)={0x0, 0x989680})

06:52:57 executing program 4:
io_setup(0x80400000000002, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x3f, 0x8000000000004cc, &(0x7f0000000400), 0x0)
r1 = memfd_create(&(0x7f0000000040)='trustedeth1vboxnet1vboxnet1user\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

06:52:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/ptmx\x00', 0x0, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)

06:52:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0)
dup3(r0, r1, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004)
write(r2, 0x0, 0x0)

06:52:57 executing program 0:
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5452, &(0x7f0000000040)={0x3, 'veth1_virt_wifi\x00'})

06:52:57 executing program 3:
socket(0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
shmctl$SHM_INFO(0x0, 0xb, 0x0)
syz_read_part_table(0x0, 0x4, &(0x7f0000001340)=[{&(0x7f0000000000)="b10687b3b95f788024cf6dede1d5068395871ecb84d18e3ad926fa465359a3f5c9d7becb9b4722c2310cd41a0b7e8cff1ad1ecac12debb80182af9f7973928b16cea814fed90bc9903137c62f78116de86142388c5d87f8147739838b427906f4a3054aedd46841674037b563a297b27dd9b185a3280dfd64017d1189eab33f22ceed932966ee544e42e7b59e2148500c7fb930ba736ecc9a9b184fa683ac66e0eb5dbec2c00520973915edef20999b18c23eb2a2b5c893930c3c10a1d536c943901c346930959c21d8834fe80f56576fb12850356a1d42233a4cb01b0a29725", 0xe0}, {&(0x7f0000000100)="f635942a6cdad70d31e2e2aa37c5c9ef243002384a7483f1c20565f0e3", 0x1d, 0x5}, {&(0x7f0000000340)="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", 0xfffffffffffffcaf, 0x800}, {&(0x7f0000000140)="52f67fd70c2a5e60d4c1e33a98162a4b36942377a62b5e5fcee0b3e2500c2e81651ed6509ee8d943b63592a3338fefd009a82b48a584c64b8f9e9c2d0ba8a2076a3ab517299a1dfbc1d2c428d816a4536f8ee73e1096a7ecac1dd370677aded1e0b60d11d7065b8951d6b1ddc3a28f928e895b7a5f6d0dc8546237a9b82bb0e767c6c6b4f483f11c8165b0b9892452981425c1e2b0519335fa4940fd2babbed23a992511e3e3abddf9c12fa8c369ea5d4d17888d29eea75e1da7299c", 0xbc, 0x7fffff7f0000000}, {&(0x7f0000000280)="7bcacf5996", 0x0, 0x2}])
write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0)

06:52:57 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

06:52:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0)

06:52:57 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
write$P9_RWALK(r0, 0x0, 0x0)

06:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup3(r0, r1, 0x0)
getpeername$netlink(r2, 0x0, &(0x7f0000000140))

06:52:57 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r0, 0x409, 0x8)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb}, 0xb)

06:52:57 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5450, 0x0)

06:52:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_getaffinity(r1, 0x8, &(0x7f0000000040))

06:52:57 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
sendmsg(r0, 0x0, 0x0)

06:52:57 executing program 2:
symlink(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
lsetxattr$security_capability(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:57 executing program 3:
r0 = memfd_create(&(0x7f00000004c0)='}+lo\x00uMH\xf2}\x9fMY}\t\xfd\xc2\xab\xdf\x01N\xcc:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xd79&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89VsV\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xdf\\\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v', 0x0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r1 = dup(r0)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$P9_RREAD(r2, 0x0, 0x0)

06:52:57 executing program 1:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

06:52:57 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fgetxattr(r0, &(0x7f0000000180)=@random={'osx.', '$\x00'}, 0x0, 0x0)

06:52:57 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FICLONE(r0, 0x5451, r1)

06:52:57 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r1 = dup(r0)
fchdir(r1)

06:52:57 executing program 0:
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000300)=""/232)
r0 = semget$private(0x0, 0x3, 0x6fe)
shmctl$IPC_RMID(r0, 0x0)
semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000680)=""/231)
socket(0x1, 0x80000, 0x100000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x210401, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
write$P9_RRENAMEAT(r1, 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000400)=0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
getpeername(r3, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000005c0)=0x80)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000200)=0x10)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, @ax25={0x3, @null, 0x1}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='veth0_to_bridge\x00', 0x1, 0x6, 0x72c})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x5452, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', {}, 0xfffa})
r5 = socket(0x1, 0x800000003, 0x0)
getsockname(r5, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000480)={'ip_vti0\x00'})
openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))

06:52:57 executing program 2:
symlink(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
lsetxattr$security_capability(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0, 0x0, 0x0)

06:52:57 executing program 1:
r0 = timerfd_create(0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000))

06:52:57 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fgetxattr(r0, &(0x7f0000000180)=@random={'osx.', '$\x00'}, 0x0, 0x0)

06:52:57 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='auxv\x00')
write$P9_RGETATTR(r0, 0x0, 0x0)

06:52:57 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
dup3(r2, r3, 0x0)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0))

06:52:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$P9_RWALK(r0, 0x0, 0xfce4)

06:52:57 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

06:52:57 executing program 2:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$getown(r0, 0x9)

06:52:57 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)

06:52:57 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000380))

06:52:57 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r1 = dup(r0)
fchdir(r1)

06:52:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = geteuid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, 0x0, 0x0)

06:52:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCFLSH(r0, 0x541b, 0x2070e000)

06:52:57 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSIG(r1, 0x5450, 0x0)

[ 1577.587373][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:57 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
semop(r0, &(0x7f0000000240)=[{}], 0x1)

06:52:57 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x1)

06:52:57 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
fcntl$setpipe(r0, 0x8, 0x0)

06:52:57 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
futimesat(r1, 0x0, 0x0)

06:52:57 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$P9_RLCREATE(r0, 0x0, 0x0)

06:52:57 executing program 1:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)

06:52:57 executing program 0:
waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0xa, 0x0)

06:52:57 executing program 4:
r0 = socket(0x1, 0x5, 0x0)
sendmsg$netlink(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000000)={0x10}, 0x10}], 0x1}, 0x0)

06:52:57 executing program 5:
open(&(0x7f00000001c0)='./file0\x00', 0x402040, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x2482, 0x20)

06:52:57 executing program 3:
setpgid(0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
semctl$GETVAL(r0, 0x0, 0xc, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setreuid(0x0, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
setreuid(0x0, r2)

06:52:57 executing program 2:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$unix(0x1, 0x200000000000002, 0x0)
sendto(r0, &(0x7f0000000400)="772514d31a137a3ed6e6dd9bb38e26be2757fa13191f4137156ecfcaffbee07853f5b6191a07d3fb808ad8c8bc862912c095d5f97c78d814ce78d9760e48bf4f374d8d634eada15c14b5a297080d04f725581849bd8e1a5d31550000002000"/104, 0x56, 0x0, &(0x7f0000000280)=@un=@file={0x1, './file0\x00'}, 0x67)

06:52:57 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$TIOCSPGRP(r1, 0x5410, 0x0)

06:52:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x86ec0, 0x1aa)

06:52:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000))

06:52:57 executing program 1:
pipe(&(0x7f0000001800)={<r0=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001ac0))

06:52:57 executing program 0:
select(0x40, &(0x7f0000000140), &(0x7f0000000180), 0x0, &(0x7f0000000200))

06:52:57 executing program 2:
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0xfffffdc9)
write$cgroup_pid(r0, &(0x7f0000000000), 0x12)

06:52:57 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$unix(0x1, 0x20000000001, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)

[ 1577.863712][   T28] audit: type=1800 audit(1601275977.869:364): pid=29939 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16380 res=0 errno=0
06:52:57 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r1, &(0x7f0000000100), 0x8)
sendfile(r1, r1, &(0x7f00000000c0), 0x2000000000feff)
mmap(&(0x7f0000656000/0x3000)=nil, 0x3000, 0x0, 0x10111, r1, 0x0)
tkill(r0, 0x13)

06:52:57 executing program 1:
pipe2$9p(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15)
dup2(r2, r0)

06:52:58 executing program 5:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
fchmod(r0, 0x2)

06:52:58 executing program 0:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
dup(r0)

06:52:58 executing program 2:
r0 = semget$private(0x0, 0x6, 0x0)
semctl$IPC_INFO(r0, 0x3, 0x10, 0x0)
r1 = semget$private(0x0, 0x2, 0x30)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000000)=""/109)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$sock_SIOCOUTQNSD(r2, 0x5421, &(0x7f0000000000))
execveat(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='lonodev]system}**(eth1\x00', &(0x7f0000000240)='\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)='\x00'], 0x1000)
prctl$PR_SET_TIMERSLACK(0x1d, 0x2)

06:52:58 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5421, &(0x7f0000000040))

06:52:58 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5452, &(0x7f0000000680)={{}, "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"})

06:52:58 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x5421, &(0x7f0000000100)={0x0, @tipc, @isdn, @generic={0x0, "211bf36363da786da2c1831acff6"}})

06:52:58 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RLERROR(r1, &(0x7f00000000c0)={0x13, 0x7, 0x0, {0xa, '/dev/full\x00'}}, 0x13)
close(r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
tkill(r0, 0x1000000000016)

06:52:58 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept$unix(r1, 0x0, 0x0)
getpeername$unix(r2, 0x0, &(0x7f0000000080))

06:52:58 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x8000}, {0x4, 0x6}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x5}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x1ff}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:58 executing program 1:
r0 = socket(0x1, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0xc000)

06:52:58 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
r3 = gettid()
fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r3})

06:52:58 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5450)

[ 1578.122721][   T28] audit: type=1804 audit(1601275978.129:365): pid=29976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16237 res=1 errno=0
06:52:58 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x400440, 0x0)
memfd_create(0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x5452, &(0x7f0000000140)=ANY=[])

06:52:58 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$NS_GET_PARENT(r2, 0x541b, 0x73b000)

06:52:58 executing program 0:
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000000)
readv(r0, &(0x7f0000000140)=[{&(0x7f00000038c0)=""/176, 0xb0}], 0x1)
inotify_rm_watch(r0, r1)

06:52:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

06:52:58 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
write$P9_RRENAMEAT(r2, 0x0, 0x0)

[ 1578.200742][   T28] audit: type=1804 audit(1601275978.129:366): pid=29978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=16237 res=1 errno=0
06:52:58 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000000), 0x0, 0x8000, 0x0, 0xffffffffffffff73)

06:52:58 executing program 4:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$P9_RATTACH(r0, 0x0, 0xfffffffffffffe45)

06:52:58 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

[ 1578.614759][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:59 executing program 3:
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x80000})

06:52:59 executing program 1:
r0 = memfd_create(&(0x7f0000000c40)='}+lo\x00uMH\xf2:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xf69&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89V\xdc\xc0\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xefG\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v\x96\xcevnmT\xeb\x81o\xc2\xd7\xf2>\xd6\xdb\x81\x15>\xc9\x87/\xd5l\x01\xf6\x11\xed\x934Q\xd4\xa9\xd2DU\xb9\x9bjN\xe4z\xc6\xbcx\x18j\xe6\xef\xfbej\xf1dR\xdbE\xfc\x8e.\xd7\xbb\xab\fz|B\xce;\x91\x82r\x1dE\xaa\b_\xf2\x98\xc5\xd7\xde\x1djDmd-\x8b\x96\x8bQ\xe06\xdb6\x88\\\xbc\xc1\xac\xe2p\xe0\x8e\xe8\x0e3\x85\xa4H[X\x17v\xba\n\x15\x1ff\xd5\x01\x9au\xddxq\n\xebr\xb5\xca\xfdX\xe7\x85G\x92\xfc\xfc[G\x14\x19V\xc8j{:r\xaf\xa9\xfe\x84\xa49\xdd\xfb\xb5\t4\xeb$M\xe6\xf2]\xe5\xa9]K\xa3\xbd\t\xbf;\xc3\xb8~\xfdjZ\xc3\x13\xf9mZ2\xeb\x89\x92\xc8\xf6\xa9\xf6\x93\x01\xea\xc7\xff\xa3d\x9d{\'\xdf\xb8\xd6*c\xf4\xf9\x97\x13\xa0\xaa\xc6K#\xffK\xe8\xfa\x88\r\x1eC\x8a|\xbb\x02f\xc0\xf4|}ux1L\xd0\rB\x18\x85J1\x15]\x89j\xdeM:\x1f]\x93V\x8aY\xe1\xc0\xbb\xd8\x9cr\x16\x95\x90\xff\xd4\xb6\x8f\xab\x17\xd3/\x8b\xc7o/;\x9cF\xf4\xfe&\xdcszM\x90\xfb\xb4>\xb7\x15\xd1\x19i\xe3%t\x16Z\x9c\v\xff\x9ec\x9fTE\xad\xb7\x90\xdb>\xa5\xf4\xec\"\xa8o\xe3hX\x87\x11\x1a\xb5\xf3\xe0\'s\xc0\xc9\xaaF\xc0\x03*\x03\xed)\x98S]\x9d\x86\x12Q\x98Y\xe0m\xdb\xef`\xbe}\xd8\xb0\xd5\x1d\xc5k[aD[Q\xd0S\xf4\x9ap\x8c\x9d\xac\x9d.\xd8L%\xe9[\x12\xef\xca(R\x97\xe6zg!\x8d\\&\x96\x06\v\xed\x17\xfci\xc9\xd7\xac\xfd\xc2\xd8j]Q\xfcpY\x8e', 0x0)
r1 = dup(r0)
write$P9_RMKNOD(r1, 0x0, 0x0)

06:52:59 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
getpriority(0x0, r1)

06:52:59 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="82", 0x1}], 0x1}, 0x0)

06:52:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000040), 0x0)

06:52:59 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x5451)

06:52:59 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
fcntl$addseals(r0, 0x2, 0x0)

06:52:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f0000000340)=@xdp, 0xfffffd34, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/111, 0xff86}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/78, 0x4e}], 0x8, &(0x7f00000008c0)=""/129, 0x81}}, {{&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/240, 0xf0}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/97, 0x61}, {&(0x7f0000002b80)=""/228, 0xe4}], 0x5, &(0x7f0000002d00)=""/38, 0x2b}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002d40)=""/4096, 0x1000}], 0x1f4cdc44, &(0x7f0000003d80)=""/211, 0xd3}}, {{&(0x7f0000003e80)=@isdn, 0x80, &(0x7f0000004540)=[{&(0x7f0000003f00)=""/109, 0x6d}, {&(0x7f0000004b40)=""/137, 0x89}, {&(0x7f0000004040)=""/174, 0xae}, {&(0x7f0000004100)=""/232, 0xe8}, {&(0x7f0000004200)=""/132, 0x84}, {&(0x7f00000042c0)=""/245, 0xf5}, {&(0x7f00000043c0)=""/241, 0xfe}, {&(0x7f0000004b00)=""/59, 0x3b}, {&(0x7f0000004500)=""/50, 0x3b}], 0x9, &(0x7f0000004600)=""/175, 0xbc}}, {{0x0, 0x0, &(0x7f00000047c0), 0x0, &(0x7f0000004800)=""/91, 0x5b}}], 0x5, 0x0, 0x0)
sendto$unix(r0, &(0x7f0000003f80)="a6", 0x1, 0x0, 0x0, 0x0)

06:52:59 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

06:52:59 executing program 4:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = inotify_init1(0x0)
r2 = dup2(r1, r0)
ioctl$TCSETSW2(r2, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "373dac58b52e175c00"})

06:52:59 executing program 1:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0)

06:52:59 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x5450, 0x0)

06:52:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
fcntl$setown(r1, 0x8, 0x0)

06:52:59 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f0000003400)='./file1\x00', 0x42040, 0x6)

06:52:59 executing program 0:
getitimer(0x2, &(0x7f00000015c0))

06:52:59 executing program 4:
r0 = epoll_create(0x1000)
flock(r0, 0x1)

06:52:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ioctl$TIOCCONS(r0, 0x541d)

06:52:59 executing program 5:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = getpgrp(0x0)
fcntl$setown(r0, 0x8, r1)
r2 = fcntl$getown(r0, 0x9)
r3 = getpgrp(0x0)
rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffff8})

06:52:59 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6400)

06:52:59 executing program 0:
open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
flock(r0, 0x2)

[ 1579.654030][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:59 executing program 1:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
dup3(r2, r0, 0x0)
write$P9_RSTAT(r1, 0x0, 0x0)

06:52:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, 0x0)

06:52:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
fstat(r1, &(0x7f0000000440))

06:52:59 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
fcntl$getown(r0, 0x9)

06:52:59 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$addseals(r0, 0x2, 0x0)

06:52:59 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7f7b}], 0x1)
semop(r0, &(0x7f00000001c0)=[{0x4, 0x3d}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:52:59 executing program 4:
r0 = memfd_create(&(0x7f0000000300)='\x04\x0e\x94\xd4\x16\xdb{\xaa\x8a\xf9\xab\x96\x9f\xd31\xcc\x99\xb6Qp4\x91n\x14V\b\x06\x1f\xd2v/\x18\x92\xf5\xb9\x80]\xb3\xf5\x03\n\xb8\xbe\xd0=\x13qD\x9b\x8b\x8f\x87\xb3.\xf9\x01\xf7N\xe3\xf4\r~\x99\x13R-\x0e\xf1\x95\x80g\xf7A\xd9\xa0\xb5X8\x01\xfa\x8b\x1a\xfd\x13\xf7\xd3_\xe6\xf5\xb1\xff\x03\xd2\x15\xbd\x99\xdf\xf5\xfa\x93\xf0\"\xf57\xaf5L-\xde\x86\x18Z\x11\x0e\xc0\xaf\xdc\xe9\xff\xa0\x92j\xe6\xca\xcf\x86\xadL\xe2\x83\xed\xea\xc8\xdd\x1c\xf2\x19Z\xcf\xbcCX\x8f\xf4|\x13D\a\xfe\x1a\xd24J\x12l\xea\xff\x0fO\xfb\x9f$\aRk \xaa`\"\x17\xdfw|\x92\n\x93+\x17\x96\ae\xben1\f@\x1f', 0x0)
pwritev(r0, &(0x7f0000000140), 0x0, 0x0, 0x0)

[ 1579.753609][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:52:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040))

06:52:59 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a00)='statm\x00')
fchown(r0, 0xffffffffffffffff, 0x0)

06:52:59 executing program 5:
inotify_init1(0x0)
r0 = semget$private(0x0, 0x3, 0xd4)
shmctl$IPC_RMID(r0, 0x0)
r1 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=']]{*}{\x00', 0xfffffffffffffffe)
keyctl$unlink(0x9, 0x0, r1)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000300)=""/217)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000380)=""/167)
semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000000)=""/23)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
getsockopt$sock_buf(r2, 0x1, 0xd, &(0x7f0000000100)=""/40, &(0x7f0000000140)=0x28)
write$cgroup_freezer_state(r2, &(0x7f0000000100)='FREEZING\x00', 0x9)
semctl$GETNCNT(r0, 0x5, 0xe, &(0x7f00000001c0)=""/4096)
open$dir(&(0x7f0000000140)='./file1\x00', 0x400000002c5, 0x0)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
creat(&(0x7f0000001240)='./file0\x00', 0x63)

06:52:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDSETMODE(r0, 0x5452, 0x2071dff9)

06:52:59 executing program 4:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x5452, 0x0)

06:52:59 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000280)='selinuxwlan0\x00', 0x0)
dup3(r0, r1, 0x0)
fchdir(r1)

06:52:59 executing program 2:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x480100, 0x1ac)

06:52:59 executing program 1:
r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
getdents64(r1, &(0x7f00000002c0)=""/152, 0xffffffffffffffef)

06:52:59 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x541b, 0x0)

06:53:00 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)

06:53:00 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5421, &(0x7f0000000100)={0x6, 'ip6erspan0\x00'})

06:53:00 executing program 2:
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0)

06:53:00 executing program 3:
r0 = socket$unix(0x1, 0x801, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
accept4$unix(r1, &(0x7f0000000240)=@abs, 0x0, 0x80000)

06:53:00 executing program 4:
r0 = eventfd(0xfffffffc)
r1 = gettid()
write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:53:00 executing program 5:
inotify_init1(0x0)
r0 = semget$private(0x0, 0x3, 0xd4)
shmctl$IPC_RMID(r0, 0x0)
r1 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=']]{*}{\x00', 0xfffffffffffffffe)
keyctl$unlink(0x9, 0x0, r1)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000300)=""/217)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000380)=""/167)
semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000000)=""/23)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
getsockopt$sock_buf(r2, 0x1, 0xd, &(0x7f0000000100)=""/40, &(0x7f0000000140)=0x28)
write$cgroup_freezer_state(r2, &(0x7f0000000100)='FREEZING\x00', 0x9)
semctl$GETNCNT(r0, 0x5, 0xe, &(0x7f00000001c0)=""/4096)
open$dir(&(0x7f0000000140)='./file1\x00', 0x400000002c5, 0x0)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
creat(&(0x7f0000001240)='./file0\x00', 0x63)

06:53:00 executing program 0:
r0 = timerfd_create(0x0, 0x0)
flock(r0, 0x2)

06:53:00 executing program 3:
r0 = semget$private(0x0, 0x3, 0x6fe)
shmctl$IPC_RMID(r0, 0x0)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000300)=""/217)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0xfff])
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x5451, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x111101, 0x81)
rmdir(&(0x7f0000000180)='./file0\x00')
fcntl$setstatus(r4, 0x4, 0x4000)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100), 0x1, 0x2)

06:53:00 executing program 4:
r0 = memfd_create(&(0x7f0000000280)='bdev]vmnet1\x00', 0x0)
r1 = dup(r0)
ftruncate(r1, 0x0)

06:53:00 executing program 0:
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETFSLABEL(r0, 0x8912, &(0x7f0000000000)="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")

06:53:00 executing program 3:
r0 = semget$private(0x0, 0x3, 0x6fe)
shmctl$IPC_RMID(r0, 0x0)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000300)=""/217)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0xfff])
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x5451, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x111101, 0x81)
rmdir(&(0x7f0000000180)='./file0\x00')
fcntl$setstatus(r4, 0x4, 0x4000)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100), 0x1, 0x2)

[ 1580.706120][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:00 executing program 0:
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000000140))
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7}, 0x7)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = gettid()
tkill(r2, 0x13)

06:53:00 executing program 1:
poll(&(0x7f00000000c0)=[{}], 0x300, 0x0)

06:53:00 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCGPKT(r2, 0x541b, &(0x7f0000000000))

06:53:01 executing program 2:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x10, &(0x7f00000000c0))

06:53:01 executing program 3:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x3)
fcntl$addseals(r2, 0x409, 0x6)
r3 = dup2(r2, r1)
write$binfmt_aout(r3, &(0x7f00000007c0), 0x20)

06:53:01 executing program 0:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)

06:53:01 executing program 4:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x6, 0x1)

06:53:01 executing program 5:
creat(&(0x7f0000000040)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@file={0x1, './bus\x00'}, 0x6e)

06:53:01 executing program 1:
open$dir(&(0x7f0000000040)='./file0\x00', 0x19240, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000000c0))

06:53:01 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0)
ioctl$TCSETA(r0, 0x5406, 0x0)

06:53:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x5421, 0x0)

06:53:01 executing program 4:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:53:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004)
write$P9_RRENAMEAT(r1, 0x0, 0x0)

06:53:01 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$int_out(r2, 0x5452, &(0x7f0000000000))

06:53:01 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=@sr0='/dev/sr0\x00', &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)

06:53:01 executing program 3:
r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
statx(r0, &(0x7f0000000200)='./file0\x00', 0x100, 0x80, &(0x7f0000000240))

06:53:01 executing program 2:
symlink(&(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='./file0\x00')
statfs(&(0x7f0000000040)='./file0\x00', 0x0)

06:53:01 executing program 0:
openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x5, 0x0)

06:53:01 executing program 2:
r0 = semget$private(0x0, 0x3, 0x6fe)
shmctl$IPC_RMID(r0, 0x0)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000300)=""/217)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0xfff])
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
dup2(r5, r4)
ioctl$KDADDIO(r4, 0x541b, 0x0)
execveat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='/@^\x00'], &(0x7f0000000440)=[&(0x7f00000001c0)='task\x00', &(0x7f0000000200)='task\x00', &(0x7f0000000280)='task\x00', &(0x7f00000002c0)='task\x00', &(0x7f0000000400)='task\x00'], 0x1800)
prctl$PR_MCE_KILL_GET(0x22)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x5451, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x111101, 0x81)
rmdir(&(0x7f0000000180)='./file0\x00')
fcntl$setstatus(r6, 0x4, 0x4000)

06:53:01 executing program 5:
r0 = epoll_create(0x800)
epoll_pwait(r0, 0x0, 0x0, 0x80000001, 0x0, 0x0)

06:53:01 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$unix(0x1, 0x1, 0x0)
dup3(r1, r0, 0x0)
getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000001080), &(0x7f0000000040)=0x4)

06:53:01 executing program 0:
setgroups(0x1, &(0x7f0000000040)=[0x0])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
getgroups(0x1, &(0x7f0000000400)=[0x0])

06:53:01 executing program 3:
creat(&(0x7f0000000580)='./file0\x00', 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0xee00, r0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fchownat(r1, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)

[ 1581.738846][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:02 executing program 4:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

06:53:02 executing program 2:
lsetxattr$security_evm(&(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:53:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname(r0, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))

06:53:02 executing program 3:
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fchmod(r0, 0x0)

06:53:02 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r2)
socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:53:02 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGSKNS(r1, 0x5450, 0x0)

06:53:02 executing program 3:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/thread-self\x00', 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)

06:53:02 executing program 2:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
readv(r0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

06:53:02 executing program 0:
ppoll(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000), 0x8)

06:53:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0)

06:53:02 executing program 2:
setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="26309eec76b14dda4f03a58a4832845b47d388c27c1d7ce1794b2b8c7721d2f276a7ef605e67f49c6a69a203043f304a521b791bdb53379defa6f3a8781b874455fe4f80075ef944d05dbd7402f3184868ab7b52065d7428c43b34e2a9eadb3c0b7b13a81f535af8131c2c0e0eab3470c1f051287b6d375ca75f9288f07685138a36ca2be5a8ba5ce5064b544865f74ea9225d5023e6a50ff8bef4d0f44788479a02a694cfa653db15c7e03fcff0ac0f9a7c88c6244f85c1f5c24c719787a87a9c63090ae0a593f2287dfcb4aa7570f7d0ffb2f8fee19d6048c2a0b0baa0a42d22f6980c8462e29142da53accbb48c0d710e9e8e27f3505fe2d5e7583c21a326", 0x100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

06:53:02 executing program 0:
r0 = socket$unix(0x1, 0x20000000001, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r2})

[ 1582.774077][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1582.782217][ T2174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:03 executing program 4:
r0 = socket$unix(0x1, 0x400000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept$unix(r1, 0x0, 0x0)
ioctl(r2, 0x5452, &(0x7f0000000100))

06:53:03 executing program 3:
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0)

06:53:03 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)

06:53:03 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004a00)="ec", 0x1}], 0x1}}], 0x1, 0x0)

06:53:03 executing program 0:
r0 = eventfd(0x0)
write$P9_RLOCK(r0, &(0x7f0000000000)={0x8}, 0x8)

06:53:03 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x578)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x5450, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
write$P9_RRENAMEAT(r3, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x5450, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup2(r0, r1)
accept4$unix(r1, 0x0, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:53:03 executing program 1:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000140))

06:53:03 executing program 0:
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x0)

06:53:03 executing program 2:
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0x0, r0)
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT(r1, 0xd, 0x0)

06:53:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004)
flock(r1, 0x1)

06:53:03 executing program 0:
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xce5382869b329573)

06:53:03 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)

06:53:03 executing program 4:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = inotify_init1(0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r2 = dup2(r0, r0)
read$char_usb(r2, &(0x7f0000000100)=""/84, 0x54)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCOUTQNSD(r3, 0x5421, &(0x7f0000000040))

06:53:03 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x77a}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}, {0x4, 0x4bd}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:03 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x2}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0x7f78}, {0x4, 0x5}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:03 executing program 3:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
chown(&(0x7f0000000a80)='./file1\x00', r0, 0x0)

06:53:03 executing program 5:
r0 = inotify_init1(0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x5421, &(0x7f0000001cc0)={0x2, @ethernet={0x0, @random="42358dc56816"}, @ethernet, @in={0x2, 0x0, @loopback}})

06:53:03 executing program 0:
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0xcfa152f92a177136, 0xffffffffffffff9c, 0x0)

06:53:03 executing program 3:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r0, 0x0, 0x0)

06:53:03 executing program 3:
r0 = memfd_create(&(0x7f0000000300)='\x04\x0e\x94\xd4\x16\xdb{\xaa\x8a\xf9\xab\x96\x9f\xd31\xcc\x99\xb6Qp4\x91n\x14V\b\x06\x1f\xd2v/\x18\x92\xf5\xb9\x80]\xb3\xf5\x03\n\xb8\xbe\xd0=\x13qD\x9b\x8b\x8f\x87\xb3.\xf9\x01\xf7N\xe3\xf4\r~\x99\x13R-\x0e\xf1\x95\x80g\xf7A\xd9\xa0\xb5X8\x01\xfa\x8b\x1a\xfd\x13\xf7\xd3_\xe6\xf5\xb1\xff\x03\xd2\x15\xbd\x99\xdf\xf5\xfa\x93\xf0\"\xf57\xaf5L-\xde\x86\x18Z\x11\x0e\xc0\xaf\xdc\xe9\xff\xa0\x92j\xe6\xca\xcf\x86\xadL\xe2\x83\xed\xea\xc8\xdd\x1c\xf2\x19Z\xcf\xbcCX\x8f\xf4|\x13D\a\xfe\x1a\xd24J\x12l\xea\xff\x0fO\xfb\x9f$\aRk \xaa`\"\x17\xdfw|\x92\n\x93+\x17\x96\ae\xben1\f@\x1f', 0x3)
fcntl$addseals(r0, 0x409, 0x1f)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="8d", 0x1}], 0x1, 0x0, 0x0)

06:53:03 executing program 0:
r0 = eventfd(0xfffffbfd)
r1 = gettid()
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RGETATTR(r2, &(0x7f0000000100)={0xa0}, 0xa0)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
fcntl$setstatus(r0, 0x4, 0x800)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:53:03 executing program 3:
r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0)
fchdir(r0)

06:53:03 executing program 0:
open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x0)
r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f00000003c0)='./file0\x00', 0x108002, 0x0)
write$P9_RLCREATE(r1, 0x0, 0x0)

06:53:03 executing program 3:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0xff8)
setxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:53:03 executing program 4:
creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
fstatfs(r0, &(0x7f00000002c0)=""/24)

[ 1583.815909][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:04 executing program 2:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
write$cgroup_subtree(r3, 0x0, 0x0)

06:53:04 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

06:53:04 executing program 0:
prlimit64(0x0, 0x4, &(0x7f0000000100), 0x0)

06:53:04 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
sched_getparam(r1, &(0x7f0000000000))

06:53:04 executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0x2ca841, 0x22)

06:53:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0)

06:53:04 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0xfffffdc9)
write$P9_RLERROR(r0, &(0x7f0000000080)={0xfffffffffffffe53, 0x7, 0x0, {0xfffffffffffffd99, 'trusted/\xc2!-md5sum}selinux\xd6T\xaf\xd8\x1b\xbf\xa8\xe5d3'}}, 0x204)

06:53:04 executing program 0:
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = fcntl$dupfd(r0, 0x0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'io'}, {0x0, 'cpu'}]}, 0x9)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x43, 0x0)
dup2(r3, r2)
tkill(r1, 0x1000000000016)

06:53:04 executing program 3:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
readv(r0, 0x0, 0x0)

06:53:04 executing program 2:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
write$cgroup_subtree(r3, 0x0, 0x0)

06:53:04 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r1=>0x0)
sched_getparam(r1, &(0x7f0000000000))

06:53:04 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000080)={'veth0_vlan\x00', {0x2, 0x0, @local}})

06:53:04 executing program 4:
r0 = epoll_create(0x3)
ioctl$FIONCLEX(r0, 0x5450)

06:53:04 executing program 5:
r0 = eventfd2(0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f00000002c0)='veth1_to_bond\x00')

06:53:04 executing program 3:
timer_create(0x1, 0x0, &(0x7f0000000040))

06:53:04 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x36)
ioctl$TIOCGSOFTCAR(r1, 0x541b, &(0x7f0000000000))

06:53:04 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000001800)='cmdline\x00')
write$P9_RLOCK(r0, 0x0, 0x63)

06:53:04 executing program 3:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
chmod(&(0x7f0000007840)='./file0\x00', 0xe)

06:53:04 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = dup3(r1, r0, 0x0)
r4 = accept4$unix(r3, 0x0, 0x0, 0x0)
write$binfmt_elf64(r4, 0x0, 0x0)

[ 1584.613948][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1584.854659][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:05 executing program 0:
prlimit64(0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0))

06:53:05 executing program 4:
prctl$PR_GET_TIMERSLACK(0x3)

06:53:05 executing program 3:
prctl$PR_GET_NO_NEW_PRIVS(0x1e)

06:53:05 executing program 1:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RREADLINK(r0, 0x0, 0x0)

06:53:05 executing program 2:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x60001, 0x0)
writev(r0, 0x0, 0x0)

06:53:05 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
accept$unix(r1, 0x0, 0x0)
tkill(r0, 0x13)

06:53:05 executing program 0:
r0 = socket$unix(0x1, 0x800000000005, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140))

06:53:05 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0x10000)
mount(0x0, 0x0, &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0)

06:53:05 executing program 0:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x13)
setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)

06:53:05 executing program 3:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe64002, 0x58)

06:53:05 executing program 1:
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = dup(r0)
utimensat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

06:53:05 executing program 2:
symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/92, 0x5c)

06:53:05 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f00000000c0))

06:53:05 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x44640, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000001140)='./file0/file0\x00', 0x2)

06:53:05 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
r2 = dup2(r0, r1)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x5421, &(0x7f0000000140)={'vlan0\x00'})

06:53:05 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xba6b5cfa07ef1278, 0x0)
truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0)

06:53:05 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa00c0, 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0xee00, r0)
chmod(&(0x7f0000000100)='./file0\x00', 0x0)

[ 1585.550404][   T28] audit: type=1800 audit(1601275985.559:367): pid=30395 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16276 res=0 errno=0
[ 1585.596789][   T28] audit: type=1800 audit(1601275985.579:368): pid=30395 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16276 res=0 errno=0
[ 1585.814004][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1585.893955][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:06 executing program 5:
r0 = inotify_init1(0x0)
fstatfs(r0, &(0x7f0000000100)=""/116)

06:53:06 executing program 2:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r1 = dup(r0)
write$P9_RGETATTR(r1, 0x0, 0xfffffcf2)

06:53:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x123c42, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)

06:53:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000040), 0x0, 0x20000000, 0x0, 0x0)

06:53:06 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x10, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb)

06:53:06 executing program 4:
pipe2$9p(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)
close(r0)

06:53:06 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x9, 0x0)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0)
io_submit(0x0, 0x0, 0x0)
io_destroy(0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
connect$unix(r3, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getsockname(r1, 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

06:53:06 executing program 1:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RLERROR(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000763a3a67347f0948905b3e45144ebca00d19e359ef4705fce7dd72b7133780c33561204b79d012cead72d18a91e1b2502b155fc4584fbd6c1a70fec65fee6242aeb7448b4e43ddfe2573756eb4293523aef17377397944bfa40a8ecf1490d1fdd1c3afde42571dcc115e4b4b82d21c980de5119d560fc080100000018d5adb553e22bfb486a49f2f7704dae6c00"/164], 0xfffffea5)
write(r0, &(0x7f0000000240)='#', 0x1)

06:53:06 executing program 3:
select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240))

06:53:06 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, 0x0)

06:53:06 executing program 2:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001940)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x0)

06:53:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040), 0x2, 0x0)
read(r2, 0x0, 0x0)

06:53:06 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
dup3(r0, r1, 0x0)
ioctl$sock_SIOCBRADDBR(r1, 0x541b, &(0x7f0000000100)='veth1_to_team\x00')

06:53:06 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2002, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
dup2(r2, r1)
tkill(r0, 0x1000000000016)

06:53:06 executing program 0:
r0 = semget$private(0x0, 0x1, 0x80)
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040))
getsockname(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80)
write$P9_RGETATTR(r3, 0x0, 0x0)
bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x189a00, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000380)=0xc)
dup3(r5, r6, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000003c0)={0x1, 'batadv0\x00', {}, 0x1})
ioctl$FS_IOC_GETFSLABEL(r6, 0x5411, &(0x7f0000000200))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000180)={'wg1\x00', r4})
semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/190)
shmctl$SHM_UNLOCK(r0, 0xc)

06:53:06 executing program 2:
r0 = getpid()
get_robust_list(r0, &(0x7f0000000040)=0x0, &(0x7f00000000c0))

06:53:06 executing program 2:
open$dir(&(0x7f0000000080)='./file0\x00', 0x5c49c3, 0x93)

06:53:06 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
fcntl$notify(r0, 0x0, 0x0)

[ 1586.427574][   T28] audit: type=1804 audit(1601275986.439:369): pid=30428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="file0" dev="sda1" ino=16258 res=1 errno=0
06:53:06 executing program 4:
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0xd831, 0xffffffffffffffff, 0x0)

[ 1586.481543][   T28] audit: type=1804 audit(1601275986.469:370): pid=30428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="file0" dev="sda1" ino=16258 res=1 errno=0
06:53:06 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r1, r0)
getpeername$unix(r0, 0x0, &(0x7f0000000080))

06:53:06 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f00000004c0)='\b', 0x1)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)

06:53:06 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x5a52fa5207268e7c, 0x40)
fsetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='osx\"cmdline\x00'], 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fremovexattr(r1, &(0x7f0000000040)=@known='user.syz\x00')
r2 = semget$private(0x0, 0x1, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000001800)='cmdline\x00')
ioctl$TCSETSF2(r3, 0x402c542d, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setgid(r4)
getgroups(0x1, &(0x7f00000003c0)=[r4])
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
r5 = eventfd(0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x5452, &(0x7f0000000000))
ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000240)="474e007497dff21d85fee7efb8591b764143a8588c58662829f836ae20518df8528724bb85bd0b1d462c61294a836843371faad6bd418961241ee2cedd94a89a5d232ea7caadac14363ea7da9603a791c2d1331d7daec1fdab91fd5fbec124894e5537d4b0ffd3e553f03e106fdbd26af77b340a2b51ac033ef1dc4d0f892517c767602a4a75ecb992")
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x5452, &(0x7f0000000000))
ioctl$KDENABIO(r7, 0x4b36)

06:53:06 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup2(r1, r0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x541b, 0x0)

06:53:06 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x8901, &(0x7f0000000040))

06:53:06 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0)
r1 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0)
dup3(r1, r0, 0x0)
read$eventfd(r0, 0x0, 0x0)

06:53:06 executing program 3:
r0 = eventfd(0xdffffffe)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
write$cgroup_int(r0, &(0x7f0000000040), 0x12)
close(r0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x503141, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x13)

06:53:06 executing program 0:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup3(r0, r1, 0x0)
r3 = semget$private(0x0, 0x1, 0x85)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000001c0)={{0x3}, 0x7, 0x81, 0x9, 0x40, 0x0, 0x0, 0x200})
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000040)=""/245)
write(r2, 0x0, 0x0)

06:53:06 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RXATTRCREATE(r0, 0x0, 0x0)

06:53:06 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
close(r0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

06:53:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x7bf341, 0x0)
write$P9_RREAD(r0, 0x0, 0x0)

06:53:06 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RXATTRCREATE(r0, 0x0, 0x0)

06:53:06 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0)

06:53:06 executing program 5:
r0 = timerfd_create(0x0, 0x0)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(0x0, r1)

06:53:06 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x78dd}], 0x1)
semop(r0, &(0x7f0000000280)=[{0x4, 0x8}, {0x4, 0x7}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x101}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:06 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$FIOCLEX(r2, 0x5451)

06:53:06 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x701742, 0x42)

06:53:06 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000040)=0xffffffffffffffa8)

06:53:06 executing program 0:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$netlink(r0, 0x0, 0x0)

06:53:06 executing program 4:
memfd_create(&(0x7f00000000c0)='bdev\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
utimes(&(0x7f0000000000)='./file0\x00', 0x0)

06:53:06 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
fcntl$getownex(r0, 0x3, 0x0)

06:53:06 executing program 3:
r0 = eventfd(0x2d)
read(r0, &(0x7f0000000700)=""/48, 0x30)

06:53:06 executing program 0:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r3, 0x0)
dup3(r3, r0, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000100)={0xd, 0x7, 0x0, {{0x0, '\x10+\xf1#%`\x05F'}}}, 0xffffffa7)

06:53:06 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000001180)=""/4096)

06:53:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="bb4b0ea2da34ab4ede30d93d8e877262c2eab7cdcdddb86d3cafa687065bcb66f820d55172dab2f1287202c94642c7b800e764f8bd7caf9439c8e638053a9827fd0a38948d9d6fa7ead75c3dd5704b3dd25aa5218513e54791942c6944c0de6c2acc0ea79f5a85610e6bc682bcab666e96dab9b859baad81268ad18159a26d562c8411db4a6bb3f3292e1033331aeac8a33613b036b98fe03420a7dd7d25f15228a5af478ce336ea992cfcd815b16d090b98af1bd87934adb90dae6d9af7a40af49f60b6dc48b26801944a184e833842913f28605c591b0909b49032702d9f6bbd8dab822396d9b740e27cfc137cf052a16dfa040e90df336819d5", 0x6e}, {&(0x7f0000000340)="50a3177e8cf12b100827384fea91b32d651baa6935d64f7999d0b76c71a5ce47cdea7cf4ed9297ba5bea44c3b1ef7154e4d275b3625a1785d60a554a34adb8f4e88aa50cfb4cc8b0cd8002a011807a7dbff6afbaad07c8df67a91a8900dcb33446606d42cd0ff785bb359d20649909cd8d4d35fb85def26792ebc8f642cd57e5d9e3e44a60f88ea78ade6660a614041dee093285ad5aca8e0246f059262df71a21e1ea788795f4ce653ab30f761b91bce7e84f904ea55ad9ad9f90bf", 0xfffffffffffffff2}], 0x10000000000000fc, &(0x7f0000000400)=[@txtime, @txtime, @mark, @timestamping={{0x14}}, @txtime={{0x18}}, @mark={{0x14}}, @txtime, @mark, @timestamping, @txtime, @txtime, @timestamping], 0x90}, 0x0)

06:53:06 executing program 5:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x71b1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

[ 1586.952288][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:07 executing program 1:
r0 = memfd_create(&(0x7f0000000180)=']\x00', 0x0)
ioctl$TIOCGWINSZ(r0, 0x5450, 0x0)

06:53:07 executing program 3:

06:53:07 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x56cac1, 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x41, 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0)

06:53:07 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000001380)={0x0, <r1=>0x0})
prlimit64(r1, 0x5, 0x0, 0x0)

06:53:07 executing program 3:
syz_open_pts(0xffffffffffffffff, 0x200083)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000040))
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)
request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='/dev/urandom\x00', 0x0)
r2 = semget$private(0x0, 0x4, 0x280)
shmctl$IPC_RMID(r2, 0x0)

06:53:07 executing program 2:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0x109801, 0x0)
write$binfmt_elf64(r0, 0x0, 0xd)

06:53:07 executing program 1:
r0 = eventfd(0xfffffbfd)
r1 = gettid()
r2 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
fcntl$setstatus(r0, 0x4, 0x800)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

06:53:07 executing program 4:
creat(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

06:53:07 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x461c43, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x8a)

06:53:07 executing program 2:
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0)

06:53:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TCSETSF(r0, 0x5451, 0x0)
r1 = semget$private(0x0, 0x1, 0x80)
shmctl$SHM_UNLOCK(r1, 0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'veth1_to_batadv\x00', {0x7}, 0x88})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000200)={0x0, 0x7, 0xfffffffffffff910, 0x1})
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/82)
pwrite64(r0, &(0x7f0000000000), 0x0, 0x40)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
epoll_create(0x400)
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)='cgroup.controllers\x00', 0x13, 0x0)

06:53:07 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='.-\x00', 0x0)
ioctl$FIONCLEX(r0, 0x5450)

06:53:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)

06:53:07 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
r1 = dup(r0)
write$P9_RXATTRWALK(r1, 0x0, 0x131)

06:53:07 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x5450, 0x0)

06:53:07 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x56cac1, 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x41, 0x0)
setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0)

[ 1587.908761][   T28] audit: type=1804 audit(1601275987.919:371): pid=30566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16257 res=1 errno=0
[ 1587.948498][   T28] audit: type=1804 audit(1601275987.939:372): pid=30571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16257 res=1 errno=0
[ 1587.984081][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:08 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xd35cac87, 0x0, 0x46}}], 0x0, 0x0, 0x0)
dup3(r0, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)

06:53:08 executing program 1:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x20)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x1b)
io_setup(0x1, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])
ftruncate(r0, 0x0)

06:53:08 executing program 0:
r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x5450, 0x0)

06:53:08 executing program 4:
open$dir(&(0x7f0000000040)='./file0\x00', 0x210040, 0xc1)

06:53:08 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$RNDZAPENTCNT(r0, 0x5452, &(0x7f0000000080))

06:53:08 executing program 5:
r0 = socket(0x29, 0x2, 0xf75)
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
r1 = eventfd(0x0)
read$eventfd(r1, &(0x7f0000000040), 0x8)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSYMLINK(r2, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x8, 0x2, 0x7}}, 0x14)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0))
r3 = signalfd4(r1, &(0x7f0000000100), 0x8, 0x80000)
fcntl$getownex(r3, 0x10, &(0x7f0000000140))
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180))
dup2(r3, 0xffffffffffffffff)
r4 = semget(0x1, 0x4, 0x220)
semop(r4, &(0x7f0000000340)=[{0x2, 0x800}], 0x1)

06:53:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r0, 0x0, 0x0, 0x0, 0x0)

06:53:08 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
close(r0)
creat(&(0x7f0000000600)='./file1\x00', 0x0)
fdatasync(r0)

06:53:08 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
r3 = fcntl$dupfd(r2, 0x0, r2)
splice(r0, 0x0, r3, 0x0, 0x200c, 0x0)

06:53:08 executing program 0:
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2)

06:53:08 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8903, &(0x7f0000001240)={'veth0_to_hsr\x00'})

06:53:08 executing program 0:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setresgid(0xee01, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
setresgid(0xee01, 0x0, 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x13)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0)

[ 1588.853942][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1589.014079][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:09 executing program 3:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x20)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x1b)
io_setup(0x1, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])
ftruncate(r0, 0x0)

06:53:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

06:53:09 executing program 4:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/thread-self\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

06:53:09 executing program 0:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
r3 = dup(r0)
write$cgroup_devices(r3, 0x0, 0x0)

06:53:09 executing program 1:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x20)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x1b)
io_setup(0x1, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}])
ftruncate(r0, 0x0)

06:53:09 executing program 5:
timer_create(0x1, &(0x7f0000000000)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180))

06:53:09 executing program 4:
lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0)
r0 = gettid()
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r1, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
r4 = dup(r1)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0)
ioctl$NS_GET_PARENT(r4, 0x541b, 0x73b000)
tkill(r0, 0x4)

06:53:09 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f00000010c0)={<r3=>0xffffffffffffffff})
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x8903, &(0x7f0000000080)={0x1, 0x0, 0x1000, 0xfffffd10, 0x0, 0x0, 0x0, 0x0})

06:53:09 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x5451, 0x0)

06:53:09 executing program 2:
socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
read(r0, 0x0, 0xffffffffffffff71)

06:53:09 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000080))

06:53:09 executing program 0:
r0 = eventfd(0x0)
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000000ed"], 0x8)
r1 = gettid()
write$binfmt_elf64(r0, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timerfd_create(0x0, 0x0)
tkill(r1, 0x13)

06:53:09 executing program 3:
open$dir(&(0x7f0000000040)='./file0\x00', 0x108040, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000, 0x80, &(0x7f0000000200))

06:53:09 executing program 4:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x0)
fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
readlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

06:53:09 executing program 5:
prctl$PR_SET_NAME(0x1c, 0x0)

06:53:09 executing program 1:
r0 = timerfd_create(0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
fcntl$setstatus(r2, 0x4, 0x0)

06:53:09 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
fstat(r0, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)

06:53:09 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xbe2be86e14ae2cf7, 0x0)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0)

06:53:09 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0040, 0x88)

06:53:09 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44380, 0x18)

06:53:09 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
flistxattr(r0, 0x0, 0x0)

06:53:09 executing program 4:
eventfd2(0x0, 0xc0001)

06:53:09 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0xa1)

06:53:09 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)

06:53:09 executing program 1:
r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00')
write$nbd(r0, 0x0, 0x0)

06:53:09 executing program 3:
r0 = memfd_create(&(0x7f0000000000)='ppp1procO[mime_typeem0{-\x00', 0x0)
r1 = socket(0x1, 0x3, 0x0)
dup2(r0, r1)
read$char_raw(r1, 0x0, 0x0)

06:53:09 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x40000000005, 0x0, &(0x7f0000000300))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)

[ 1589.890769][   T28] audit: type=1800 audit(1601275989.899:373): pid=30667 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16276 res=0 errno=0
06:53:09 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x9, &(0x7f0000000140)=<r1=>0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0)
io_submit(r1, 0x300, &(0x7f0000000540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

06:53:10 executing program 0:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000100)={0xd, 0x7, 0x0, {{0x0, '\x10+\xf1#%`\x05F'}}}, 0xffffffa7)

06:53:10 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000500)={0x0, 0xea60}, 0x10)
recvmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x20)

06:53:10 executing program 1:
r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0)
readv(r0, 0x0, 0x0)

06:53:10 executing program 4:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$P9_RLCREATE(r0, 0x0, 0xffffffffffffffbb)

06:53:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fstatfs(r0, &(0x7f0000000080))

06:53:10 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x5411, 0x0)

[ 1590.054391][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:10 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800)

06:53:10 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x0)

06:53:10 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x78d7}, {0x4, 0x2}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:10 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00')
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RWSTAT(r1, 0x0, 0x0)

06:53:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
write$P9_RRENAME(r0, 0x0, 0x0)

06:53:10 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0xff8)
rmdir(&(0x7f0000000040)='./file0/f.le.\x00')

06:53:10 executing program 2:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x78dd}], 0x1)
semop(r0, &(0x7f0000000040)=[{0x4, 0x66}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:10 executing program 3:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000440)=@nullb='/dev/nullb0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='sysfs\x00', 0x80800a, 0x0)

06:53:10 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r0, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = dup2(r0, r2)
write$P9_RCREATE(r3, 0x0, 0x0)

06:53:10 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000440)={&(0x7f0000000040)=@proc, 0xc, 0x0, 0xfffffffffffffd79}, 0x0)

06:53:10 executing program 0:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0xfffffdc9)
write$P9_RLERROR(r0, &(0x7f0000000080)={0xfffffffffffffe53, 0x7, 0x0, {0xfffffffffffffd99, 'trusted/\xc2!-md5sum}selinux\xd6T\xaf\xd8\x1b\xbf\xa8\xe5d3'}}, 0x204)

06:53:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f0000000280))

06:53:10 executing program 3:
r0 = socket(0x1, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x86800)

06:53:10 executing program 5:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
fstatfs(r0, &(0x7f0000000040)=""/153)

06:53:11 executing program 1:
io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0])

06:53:11 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x5450, 0x0)

06:53:11 executing program 3:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000040)=[{0x4, 0x77a}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x4, 0x8000}, {0x4, 0x46}], 0x2)
semop(r0, &(0x7f0000000080)=[{0x4, 0x71b1}, {0x4, 0x6}], 0x2)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:11 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$P9_RWSTAT(r0, 0x0, 0xffffffffffffffdb)

06:53:11 executing program 2:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
openat$cgroup_subtree(r2, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)

06:53:11 executing program 1:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
ioctl$TIOCGSOFTCAR(r1, 0x541b, 0x0)

06:53:11 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)

[ 1591.096996][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:11 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x200000000001, 0x0)
bind$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x5451, 0x0)

06:53:11 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000080))

06:53:11 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
ioctl$TIOCSPGRP(r0, 0x5451, 0x0)
socket$netlink(0x10, 0x3, 0x5)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000007880), 0x8, 0x0)
close(r1)
write$P9_RRENAME(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'dummy0\x00', {0x2}, 0x8})
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001940)={'vxcan1\x00'})
r3 = semget$private(0x0, 0x4, 0x10)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6)
shmctl$SHM_LOCK(r3, 0xb)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/4096)
r4 = timerfd_create(0x0, 0x0)
ioctl$TIOCGPGRP(r4, 0x5450, 0x0)
r5 = dup(r4)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000010c0))
ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0)

06:53:11 executing program 5:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x5452, &(0x7f0000000040))

06:53:11 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000000), 0x0, 0x290d8, 0x0, 0x4a8ee49da7901d03)

06:53:11 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
r1 = timerfd_create(0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
r3 = memfd_create(&(0x7f0000000340)='Jse\x01\x00&\x01\x00boxn\x00', 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r3, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0x5452, 0x0)

[ 1591.256651][   T28] audit: type=1804 audit(1601275991.269:374): pid=30770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16239 res=1 errno=0
[ 1591.277946][   T28] audit: type=1804 audit(1601275991.289:375): pid=30769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16233 res=1 errno=0
[ 1591.301573][   T28] audit: type=1804 audit(1601275991.309:376): pid=30778 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16239 res=1 errno=0
[ 1591.348033][   T28] audit: type=1804 audit(1601275991.309:377): pid=30777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16233 res=1 errno=0
06:53:11 executing program 4:
r0 = memfd_create(&(0x7f0000000000)='\xe2$systemnodevGPL-GPL\x00', 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
dup2(r0, r1)
pread64(r1, 0x0, 0x0, 0x0)

06:53:11 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x180)
r0 = semget$private(0x0, 0x4, 0x280)
shmctl$IPC_RMID(r0, 0x0)
semop(r0, &(0x7f0000000000)=[{0x3, 0x3ff, 0x800}, {0x1, 0x5, 0x1800}, {0x0, 0xf139}, {0x2}, {0x1, 0x3}, {0x7, 0x3}], 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
write$P9_RUNLINKAT(r4, 0x0, 0x0)
r5 = accept4$unix(r4, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000001c0)=0x2c)
write$P9_RXATTRWALK(r1, 0x0, 0x0)
fadvise64(r1, 0x3, 0x3, 0x0)
semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000040)=""/82)

06:53:11 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

06:53:11 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000480))

06:53:11 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
ioctl$TIOCSPGRP(r0, 0x5451, 0x0)
socket$netlink(0x10, 0x3, 0x5)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000007880), 0x8, 0x0)
close(r1)
write$P9_RRENAME(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'dummy0\x00', {0x2}, 0x8})
socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001940)={'vxcan1\x00'})
r3 = semget$private(0x0, 0x4, 0x10)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6)
shmctl$SHM_LOCK(r3, 0xb)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/4096)
r4 = timerfd_create(0x0, 0x0)
ioctl$TIOCGPGRP(r4, 0x5450, 0x0)
r5 = dup(r4)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000010c0))
ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0)

06:53:11 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5450, 0x0)

06:53:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGRS485(r0, 0x40045431, 0x0)

[ 1591.894034][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1591.902504][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1591.911408][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1591.920323][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:12 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x26e1, 0x0)

06:53:12 executing program 4:
r0 = epoll_create(0x8a6)
close(r0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
fsync(r0)

06:53:12 executing program 0:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000240)=[{0x4, 0x7fff}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:12 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
ioctl$CHAR_RAW_SECTGET(r0, 0x5451, 0x0)

06:53:12 executing program 2:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r2, r1)
splice(r2, 0x0, r0, 0x0, 0x55aa40be, 0x0)
syz_open_procfs(0x0, &(0x7f0000001580)='fd/3\x00')

06:53:12 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000140)=0x1a5)
socket$unix(0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0x5450, 0x0)

06:53:12 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
write$binfmt_aout(r1, 0x0, 0x0)

06:53:12 executing program 5:
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)

06:53:12 executing program 1:
r0 = semget$private(0x0, 0x8, 0x0)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8000}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x4, 0x7f78}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x4, 0x1}], 0x1)
semctl$GETVAL(r0, 0x4, 0xc, 0x0)

06:53:12 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept$unix(r0, 0x0, 0x0)
fcntl$lock(r2, 0x0, 0x0)

06:53:12 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)

06:53:12 executing program 2:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0xa8)

06:53:12 executing program 3:
r0 = eventfd2(0x400, 0x800)
write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffa, 0x8)

06:53:12 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KDSETLED(r2, 0x5450, 0x0)

[ 1592.133897][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
recvmmsg(r2, &(0x7f00000018c0), 0x0, 0x40000060, 0x0)

06:53:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
sendmmsg$sock(r1, 0x0, 0x0, 0x0)

06:53:12 executing program 3:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
fcntl$setflags(r0, 0x2, 0x0)

06:53:12 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000000)="89", 0x1, 0x40040c8, &(0x7f00000000c0)=@nl, 0x80)

06:53:12 executing program 5:
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40a40, 0x0)
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000080)='./file0\x00', 0x4000, 0x200, &(0x7f0000000b00))

06:53:12 executing program 3:
r0 = epoll_create(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0x5451, 0x0)

06:53:12 executing program 1:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
statx(r0, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80, &(0x7f0000000140))

06:53:12 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80)
fchmod(r1, 0x0)

06:53:12 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000000)='#', 0x1, 0x10, 0x0, 0x0)

06:53:12 executing program 5:
mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='9p\x00', 0x0, 0x0)

06:53:12 executing program 0:
socketpair(0x1, 0x801, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
fstat(r1, &(0x7f0000001600))

06:53:13 executing program 3:
semget(0xffffffffffffffff, 0xd, 0x5)

06:53:13 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setitimer(0x2, &(0x7f0000000040)={{0x77359400}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f0000000140)={0x3, 'syz_tun\x00'})

06:53:13 executing program 2:
r0 = eventfd2(0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x5452, 0x0)

06:53:13 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00')
write$P9_RWRITE(r0, 0x0, 0x62)

06:53:13 executing program 3:
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

06:53:13 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$unix(r0, 0x0, 0x0)

06:53:13 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
fchown(r2, 0xffffffffffffffff, 0x0)

06:53:13 executing program 3:
symlink(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./bus\x00')
unlink(&(0x7f0000000040)='./bus/file0\x00')

06:53:13 executing program 1:
r0 = gettid()
sched_getaffinity(r0, 0xfffffffffffffd98, &(0x7f0000000000))

06:53:13 executing program 4:
prctl$PR_SET_MM(0x15, 0x0, &(0x7f0000ffb000/0x2000)=nil)

06:53:13 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa0801, 0x0)
write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0)

06:53:13 executing program 2:
r0 = epoll_create(0x7)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0)

06:53:13 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x33)

06:53:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x5})

06:53:13 executing program 0:
r0 = memfd_create(&(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0)

06:53:13 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x5450, 0x0)

06:53:13 executing program 2:
r0 = eventfd(0x0)
r1 = dup(r0)
ioctl$CHAR_RAW_SECDISCARD(r1, 0x5450, 0x0)

06:53:13 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x4164c0, 0x0)
dup2(r0, r1)
ioctl$TCSBRKP(r1, 0x5414, 0x8003ff)

[ 1593.175929][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:13 executing program 5:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x86)

06:53:13 executing program 1:
r0 = eventfd(0xdffffffe)
write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
tkill(r1, 0x13)

06:53:13 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28f3c65db3daa9da, 0x0)
r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x0)

06:53:13 executing program 3:
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f00009b1ffc))
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00')
r3 = memfd_create(&(0x7f0000000180)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x1c\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4', 0x0)
write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
dup3(r2, r3, 0x0)
r4 = dup(r3)
openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r5 = gettid()
tkill(r5, 0x13)

06:53:13 executing program 0:
open$dir(&(0x7f0000000080)='./file0\x00', 0x24a, 0x0)
setreuid(0xee00, 0x0)
r0 = getuid()
setreuid(0xee00, r0)
utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))

06:53:13 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$TIOCGPKT(r0, 0x541b, &(0x7f0000000040))

06:53:13 executing program 2:
io_setup(0x0, &(0x7f0000000400)=<r0=>0x0)
io_destroy(r0)

06:53:13 executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
unlink(&(0x7f0000000240)='./file0/file0\x00')

06:53:13 executing program 3:
mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)

[ 1593.371797][   T28] audit: type=1804 audit(1601275993.379:378): pid=30925 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16258 res=1 errno=0
06:53:14 executing program 4:
r0 = socket$unix(0x1, 0x10000000000001, 0x0)
bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = accept$unix(r0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
rt_sigsuspend(0x0, 0x0)
ioctl$sock_SIOCGIFBR(r1, 0x5451, 0x0)

06:53:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup(r0)
write$P9_RREMOVE(r1, 0x0, 0x4c)

06:53:14 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x120, &(0x7f0000001400)={0x0, 0x1c9c380})

06:53:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close(r0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r2)
splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0)
ioctl$TCSETAF(r0, 0x541b, 0x0)

06:53:14 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000c)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0x5452, &(0x7f0000000080))

06:53:14 executing program 5:
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
splice(r1, &(0x7f0000000080), r0, 0x0, 0x0, 0x5)

06:53:14 executing program 1:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup2(r0, r1)
ioctl$TIOCVHANGUP(r2, 0x541b, 0x713000)

06:53:14 executing program 2:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x5421, 0x96001d)

06:53:14 executing program 3:
statfs(&(0x7f0000000100)='./file0/file0\x00', 0x0)

06:53:14 executing program 0:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0)

06:53:14 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = dup3(r0, r2, 0x0)
ioctl$KIOCSOUND(r3, 0x5402, 0x0)

06:53:14 executing program 1:
r0 = open$dir(&(0x7f0000008140)='./file0\x00', 0x40, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))

06:53:14 executing program 4:
r0 = inotify_init1(0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
write$P9_RREMOVE(r1, 0x0, 0x0)

06:53:14 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x123840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x40)

06:53:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000040), 0x0, 0x40000061, 0x0)

06:53:14 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)

06:53:14 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pwritev2(r0, &(0x7f0000003440)=[{0x0}], 0x1, 0x0, 0x0, 0x6)

[ 1594.214546][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1594.228481][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:14 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

06:53:14 executing program 4:
setresuid(0xee01, 0x0, 0xee01)
r0 = getuid()
setresuid(0xee01, r0, 0xee01)
r1 = semget$private(0x0, 0x2, 0x0)
semctl$IPC_RMID(r1, 0x2, 0x10)

06:53:14 executing program 0:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000000004, 0x8000000000000011, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

06:53:14 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x5451, 0x0)

06:53:14 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r1 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
dup2(r0, r1)

06:53:14 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
dup2(r1, r0)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)

06:53:14 executing program 1:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCSETAW(r1, 0x5450, 0x0)

06:53:14 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, 0x0, 0x0, 0x40004, 0x0, 0x0)

06:53:14 executing program 2:
r0 = eventfd(0x0)
write(r0, &(0x7f0000000000)="abbefe935e3d03ef", 0x8)
r1 = gettid()
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc))
close(r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
open(&(0x7f0000000000)='.\x00', 0xb8a842, 0x0)
tkill(r1, 0x13)

06:53:14 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)

06:53:14 executing program 4:
readlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

06:53:14 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0)

[ 1594.934430][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:15 executing program 3:

06:53:15 executing program 1:
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)='#', 0x1}], 0x1)

06:53:15 executing program 4:
select(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x48e2}, &(0x7f00000002c0)={0x77359400})

06:53:15 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x158)

06:53:15 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000020380)='./file0\x00', 0x10a50, 0x188)

06:53:15 executing program 2:

06:53:15 executing program 0:

06:53:15 executing program 2:

06:53:15 executing program 1:

06:53:15 executing program 4:
open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x0)

06:53:15 executing program 3:

06:53:15 executing program 1:

06:53:15 executing program 2:

[ 1595.257140][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:15 executing program 0:

06:53:15 executing program 3:

06:53:15 executing program 1:

[ 1595.292507][   T28] audit: type=1800 audit(1601275995.299:379): pid=31029 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16276 res=0 errno=0
06:53:15 executing program 5:

06:53:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001500))

06:53:15 executing program 2:

06:53:15 executing program 3:

06:53:15 executing program 1:

06:53:15 executing program 0:

06:53:15 executing program 1:

06:53:15 executing program 0:

06:53:15 executing program 3:

06:53:15 executing program 4:

06:53:15 executing program 1:

06:53:15 executing program 2:

06:53:15 executing program 5:

06:53:15 executing program 1:

06:53:15 executing program 2:

06:53:15 executing program 3:

06:53:15 executing program 4:

06:53:15 executing program 0:

06:53:15 executing program 2:

06:53:15 executing program 4:

06:53:15 executing program 1:

06:53:15 executing program 3:

06:53:15 executing program 0:

06:53:15 executing program 2:

06:53:15 executing program 5:

06:53:15 executing program 4:

06:53:15 executing program 3:

06:53:15 executing program 1:

06:53:15 executing program 0:

06:53:15 executing program 2:

06:53:15 executing program 4:

06:53:15 executing program 3:

06:53:15 executing program 1:

06:53:15 executing program 0:

06:53:15 executing program 2:

06:53:15 executing program 4:

06:53:15 executing program 5:

06:53:15 executing program 1:

06:53:15 executing program 3:

06:53:15 executing program 2:

06:53:15 executing program 0:

06:53:15 executing program 4:

06:53:15 executing program 3:

06:53:15 executing program 4:

06:53:16 executing program 2:

06:53:16 executing program 1:

06:53:16 executing program 3:

06:53:16 executing program 0:

06:53:16 executing program 5:

06:53:16 executing program 2:

06:53:16 executing program 4:

06:53:16 executing program 1:

06:53:16 executing program 3:

06:53:16 executing program 0:

06:53:16 executing program 2:

06:53:16 executing program 1:

06:53:16 executing program 0:

06:53:16 executing program 3:

06:53:16 executing program 4:

06:53:16 executing program 1:

06:53:16 executing program 5:

06:53:16 executing program 2:

06:53:16 executing program 0:

06:53:16 executing program 3:

06:53:16 executing program 4:

06:53:16 executing program 1:

06:53:16 executing program 4:

06:53:16 executing program 3:

06:53:16 executing program 2:

06:53:16 executing program 0:

06:53:16 executing program 1:

06:53:16 executing program 4:

[ 1596.294131][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:16 executing program 5:

06:53:16 executing program 3:

06:53:16 executing program 1:

06:53:16 executing program 0:

06:53:16 executing program 2:

06:53:16 executing program 4:

06:53:16 executing program 1:

06:53:16 executing program 2:

06:53:16 executing program 3:

06:53:16 executing program 0:

06:53:16 executing program 4:

06:53:16 executing program 3:

06:53:16 executing program 5:

06:53:16 executing program 0:

06:53:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fa466355b9ea2f1, 0x0)
write$P9_RWALK(r0, 0x0, 0x0)

06:53:16 executing program 1:

06:53:16 executing program 4:

06:53:16 executing program 3:

06:53:16 executing program 2:

06:53:16 executing program 0:

06:53:16 executing program 4:

06:53:16 executing program 1:

06:53:16 executing program 3:

06:53:16 executing program 0:

06:53:16 executing program 5:

06:53:16 executing program 2:

06:53:16 executing program 1:

06:53:16 executing program 4:

06:53:16 executing program 3:

06:53:16 executing program 0:

06:53:16 executing program 1:

06:53:16 executing program 2:

06:53:16 executing program 3:

06:53:16 executing program 4:

06:53:16 executing program 0:

06:53:16 executing program 1:

06:53:16 executing program 5:

06:53:16 executing program 2:

06:53:16 executing program 3:

06:53:16 executing program 4:

06:53:16 executing program 0:

06:53:16 executing program 1:

06:53:16 executing program 0:

06:53:16 executing program 4:

06:53:16 executing program 3:

06:53:16 executing program 2:

06:53:16 executing program 1:

06:53:17 executing program 0:

06:53:17 executing program 5:

06:53:17 executing program 4:

06:53:17 executing program 1:

06:53:17 executing program 3:

06:53:17 executing program 2:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 4:

06:53:17 executing program 2:

06:53:17 executing program 0:

06:53:17 executing program 3:

06:53:17 executing program 1:

06:53:17 executing program 5:

06:53:17 executing program 2:

06:53:17 executing program 3:

06:53:17 executing program 4:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 3:

06:53:17 executing program 4:

06:53:17 executing program 1:

06:53:17 executing program 0:

06:53:17 executing program 2:

06:53:17 executing program 1:

06:53:17 executing program 5:

06:53:17 executing program 4:

06:53:17 executing program 3:

06:53:17 executing program 2:

06:53:17 executing program 0:

06:53:17 executing program 1:

[ 1597.336117][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:17 executing program 3:

06:53:17 executing program 1:

06:53:17 executing program 2:

06:53:17 executing program 4:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 5:

06:53:17 executing program 3:

06:53:17 executing program 4:

06:53:17 executing program 1:

06:53:17 executing program 2:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 4:

06:53:17 executing program 0:

06:53:17 executing program 3:

06:53:17 executing program 2:

06:53:17 executing program 1:

06:53:17 executing program 5:

06:53:17 executing program 4:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 3:

06:53:17 executing program 2:

06:53:17 executing program 4:

06:53:17 executing program 1:

06:53:17 executing program 2:

06:53:17 executing program 3:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 5:

06:53:17 executing program 3:

06:53:17 executing program 4:

06:53:17 executing program 2:

06:53:17 executing program 1:

06:53:17 executing program 0:

06:53:17 executing program 1:

06:53:17 executing program 4:

06:53:18 executing program 1:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 2:

[ 1597.973875][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:18 executing program 5:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 4:

06:53:18 executing program 2:

06:53:18 executing program 1:

06:53:18 executing program 4:

06:53:18 executing program 0:

06:53:18 executing program 1:

06:53:18 executing program 4:

06:53:18 executing program 2:

06:53:18 executing program 3:

06:53:18 executing program 5:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 1:

06:53:18 executing program 4:

06:53:18 executing program 2:

06:53:18 executing program 4:

06:53:18 executing program 0:

06:53:18 executing program 3:

06:53:18 executing program 2:

06:53:18 executing program 1:

06:53:18 executing program 3:

06:53:18 executing program 5:

06:53:18 executing program 4:

06:53:18 executing program 1:

06:53:18 executing program 2:

06:53:18 executing program 0:

06:53:18 executing program 3:

[ 1598.376377][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:18 executing program 4:

06:53:18 executing program 1:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 2:

06:53:18 executing program 1:

06:53:18 executing program 5:

06:53:18 executing program 4:

06:53:18 executing program 0:

06:53:18 executing program 2:

06:53:18 executing program 3:

06:53:18 executing program 1:

06:53:18 executing program 4:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 3:

06:53:18 executing program 1:

06:53:18 executing program 2:

06:53:18 executing program 4:

06:53:18 executing program 0:

06:53:18 executing program 5:

06:53:18 executing program 1:

06:53:18 executing program 2:

06:53:18 executing program 3:

06:53:18 executing program 4:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 1:

06:53:18 executing program 3:

06:53:18 executing program 2:

06:53:18 executing program 4:

06:53:18 executing program 5:

06:53:18 executing program 2:

06:53:18 executing program 3:

06:53:18 executing program 0:

06:53:18 executing program 1:

06:53:18 executing program 4:

06:53:18 executing program 4:

06:53:19 executing program 0:

06:53:19 executing program 1:

06:53:19 executing program 2:

06:53:19 executing program 3:

06:53:19 executing program 0:

06:53:19 executing program 5:

06:53:19 executing program 3:

06:53:19 executing program 0:

06:53:19 executing program 2:

06:53:19 executing program 4:

06:53:19 executing program 1:

06:53:19 executing program 2:

06:53:19 executing program 4:

06:53:19 executing program 1:

06:53:19 executing program 0:

06:53:19 executing program 3:

06:53:19 executing program 1:

06:53:19 executing program 5:

06:53:19 executing program 2:

06:53:19 executing program 4:

06:53:19 executing program 0:

06:53:19 executing program 3:

06:53:19 executing program 1:

06:53:19 executing program 3:

06:53:19 executing program 4:

06:53:19 executing program 0:

06:53:19 executing program 2:

06:53:19 executing program 1:

06:53:19 executing program 2:

06:53:19 executing program 5:

06:53:19 executing program 4:

06:53:19 executing program 3:

06:53:19 executing program 1:

06:53:19 executing program 0:

06:53:19 executing program 2:

06:53:19 executing program 3:

06:53:19 executing program 0:

[ 1599.430995][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:19 executing program 1:

06:53:19 executing program 4:

06:53:19 executing program 2:

06:53:19 executing program 3:

06:53:19 executing program 5:

06:53:19 executing program 4:

06:53:19 executing program 0:

06:53:19 executing program 1:

06:53:19 executing program 3:

06:53:19 executing program 2:

06:53:19 executing program 1:

06:53:19 executing program 4:

06:53:19 executing program 0:

06:53:19 executing program 2:

06:53:19 executing program 3:

06:53:19 executing program 2:

06:53:19 executing program 5:

06:53:19 executing program 0:

06:53:19 executing program 4:

06:53:19 executing program 1:

06:53:19 executing program 3:

06:53:19 executing program 2:

06:53:19 executing program 2:

06:53:19 executing program 0:

06:53:19 executing program 1:

06:53:19 executing program 3:

06:53:19 executing program 4:

06:53:19 executing program 2:

06:53:19 executing program 1:

06:53:19 executing program 4:

06:53:19 executing program 5:

06:53:19 executing program 3:

06:53:19 executing program 2:

06:53:19 executing program 0:

06:53:19 executing program 1:

06:53:19 executing program 4:

06:53:20 executing program 0:

06:53:20 executing program 3:

06:53:20 executing program 1:

06:53:20 executing program 2:

06:53:20 executing program 5:

06:53:20 executing program 0:

06:53:20 executing program 4:

06:53:20 executing program 1:

06:53:20 executing program 3:

06:53:20 executing program 2:

06:53:20 executing program 0:

06:53:20 executing program 3:

06:53:20 executing program 2:

06:53:20 executing program 1:

06:53:20 executing program 4:

06:53:20 executing program 1:

06:53:20 executing program 5:

06:53:20 executing program 0:

06:53:20 executing program 4:

06:53:20 executing program 2:

06:53:20 executing program 3:

06:53:20 executing program 1:

06:53:20 executing program 2:

06:53:20 executing program 0:

06:53:20 executing program 4:

06:53:20 executing program 3:

06:53:20 executing program 1:

06:53:20 executing program 2:

06:53:20 executing program 5:

06:53:20 executing program 1:

06:53:20 executing program 3:

06:53:20 executing program 4:

06:53:20 executing program 2:

06:53:20 executing program 0:

06:53:20 executing program 1:

06:53:20 executing program 4:

06:53:20 executing program 2:

06:53:20 executing program 3:

06:53:20 executing program 0:

[ 1600.456354][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:20 executing program 1:

06:53:20 executing program 5:

06:53:20 executing program 4:

06:53:20 executing program 1:

06:53:20 executing program 2:

06:53:20 executing program 0:

06:53:20 executing program 3:

06:53:20 executing program 2:

06:53:20 executing program 3:

06:53:20 executing program 4:

06:53:20 executing program 1:

06:53:20 executing program 0:

06:53:20 executing program 3:

06:53:20 executing program 5:

06:53:20 executing program 2:

06:53:20 executing program 1:

06:53:20 executing program 0:

06:53:20 executing program 4:

06:53:20 executing program 3:

06:53:20 executing program 0:

06:53:20 executing program 1:

06:53:20 executing program 2:

06:53:20 executing program 4:

06:53:20 executing program 3:

06:53:20 executing program 0:

06:53:20 executing program 5:

06:53:20 executing program 1:

06:53:20 executing program 2:

06:53:20 executing program 3:

06:53:20 executing program 4:

06:53:20 executing program 0:

06:53:21 executing program 1:

06:53:21 executing program 2:

06:53:21 executing program 0:

06:53:21 executing program 4:

06:53:21 executing program 3:

06:53:21 executing program 2:

[ 1601.013911][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:21 executing program 5:

06:53:21 executing program 1:

06:53:21 executing program 3:

06:53:21 executing program 0:

06:53:21 executing program 4:

06:53:21 executing program 2:

06:53:21 executing program 2:

06:53:21 executing program 3:

06:53:21 executing program 0:

06:53:21 executing program 1:

06:53:21 executing program 4:

06:53:21 executing program 1:

06:53:21 executing program 5:

06:53:21 executing program 3:

06:53:21 executing program 2:

06:53:21 executing program 4:

06:53:21 executing program 0:

06:53:21 executing program 1:

06:53:21 executing program 1:

06:53:21 executing program 2:

06:53:21 executing program 0:

06:53:21 executing program 3:

06:53:21 executing program 4:

06:53:21 executing program 1:

06:53:21 executing program 5:

06:53:21 executing program 2:

06:53:21 executing program 4:

06:53:21 executing program 0:

06:53:21 executing program 1:

06:53:21 executing program 3:

06:53:21 executing program 1:

06:53:21 executing program 3:

06:53:21 executing program 2:

06:53:21 executing program 0:

06:53:21 executing program 4:

[ 1601.493958][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:21 executing program 0:

06:53:21 executing program 5:

06:53:21 executing program 2:

06:53:21 executing program 3:

06:53:21 executing program 1:

06:53:21 executing program 4:

06:53:21 executing program 0:

06:53:21 executing program 4:

06:53:21 executing program 3:

06:53:21 executing program 1:

06:53:21 executing program 2:

06:53:21 executing program 0:

06:53:21 executing program 2:

06:53:21 executing program 5:

06:53:21 executing program 4:

06:53:21 executing program 0:

06:53:21 executing program 3:

06:53:21 executing program 1:

06:53:21 executing program 2:

06:53:21 executing program 3:

06:53:21 executing program 4:

06:53:21 executing program 1:

06:53:21 executing program 2:

06:53:21 executing program 3:

06:53:21 executing program 0:

06:53:21 executing program 5:

06:53:21 executing program 2:

06:53:21 executing program 3:

06:53:21 executing program 1:

06:53:21 executing program 4:

06:53:21 executing program 0:

06:53:22 executing program 0:

06:53:22 executing program 1:

06:53:22 executing program 2:

06:53:22 executing program 3:

06:53:22 executing program 0:

06:53:22 executing program 4:

06:53:22 executing program 5:

06:53:22 executing program 2:

06:53:22 executing program 1:

06:53:22 executing program 3:

06:53:22 executing program 0:

06:53:22 executing program 4:

06:53:22 executing program 2:

06:53:22 executing program 1:

06:53:22 executing program 4:

06:53:22 executing program 3:

06:53:22 executing program 0:

06:53:22 executing program 2:

06:53:22 executing program 5:

06:53:22 executing program 3:

06:53:22 executing program 1:

06:53:22 executing program 4:

06:53:22 executing program 0:

06:53:22 executing program 2:

06:53:22 executing program 0:

06:53:22 executing program 2:

06:53:22 executing program 4:

06:53:22 executing program 3:

06:53:22 executing program 1:

06:53:22 executing program 2:

06:53:22 executing program 5:

06:53:22 executing program 2:

06:53:22 executing program 3:

06:53:22 executing program 0:

06:53:22 executing program 4:

06:53:22 executing program 1:

06:53:22 executing program 1:

06:53:22 executing program 0:

06:53:22 executing program 4:

06:53:22 executing program 2:

06:53:22 executing program 3:

06:53:22 executing program 1:

[ 1602.536538][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:22 executing program 5:

06:53:22 executing program 2:

06:53:22 executing program 4:

06:53:22 executing program 0:

06:53:22 executing program 3:

06:53:22 executing program 1:

06:53:22 executing program 3:

06:53:22 executing program 1:

06:53:22 executing program 0:

06:53:22 executing program 4:

06:53:22 executing program 2:

06:53:22 executing program 4:

06:53:22 executing program 5:

06:53:22 executing program 1:

06:53:22 executing program 3:

06:53:22 executing program 2:

06:53:22 executing program 4:

06:53:22 executing program 0:

06:53:22 executing program 1:

06:53:22 executing program 0:

06:53:22 executing program 3:

06:53:22 executing program 2:

06:53:22 executing program 4:

06:53:22 executing program 1:

06:53:22 executing program 5:

06:53:22 executing program 1:

06:53:22 executing program 4:

06:53:22 executing program 2:

06:53:22 executing program 0:

06:53:22 executing program 3:

06:53:23 executing program 4:

06:53:23 executing program 2:

06:53:23 executing program 1:

06:53:23 executing program 0:

06:53:23 executing program 3:

06:53:23 executing program 1:

06:53:23 executing program 5:

06:53:23 executing program 1:

06:53:23 executing program 2:

06:53:23 executing program 3:

06:53:23 executing program 4:

06:53:23 executing program 0:

06:53:23 executing program 1:

06:53:23 executing program 3:

06:53:23 executing program 2:

06:53:23 executing program 0:

06:53:23 executing program 4:

06:53:23 executing program 1:

06:53:23 executing program 5:

06:53:23 executing program 2:

06:53:23 executing program 0:

06:53:23 executing program 1:

06:53:23 executing program 4:

06:53:23 executing program 3:

06:53:23 executing program 0:

06:53:23 executing program 2:

06:53:23 executing program 1:

06:53:23 executing program 3:

06:53:23 executing program 4:

06:53:23 executing program 0:

06:53:23 executing program 5:

06:53:23 executing program 1:

06:53:23 executing program 3:

06:53:23 executing program 2:

06:53:23 executing program 0:

06:53:23 executing program 4:

06:53:23 executing program 2:

06:53:23 executing program 3:

06:53:23 executing program 1:

06:53:23 executing program 0:

06:53:23 executing program 4:

06:53:23 executing program 3:

06:53:23 executing program 5:

06:53:23 executing program 0:

06:53:23 executing program 4:

06:53:23 executing program 1:

06:53:23 executing program 2:

06:53:23 executing program 3:

[ 1603.583997][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:23 executing program 0:

06:53:23 executing program 2:

06:53:23 executing program 3:

06:53:23 executing program 4:

06:53:23 executing program 1:

06:53:23 executing program 3:

06:53:23 executing program 5:

06:53:23 executing program 0:

06:53:23 executing program 4:

06:53:23 executing program 3:

06:53:23 executing program 1:

06:53:23 executing program 2:

06:53:23 executing program 1:

06:53:23 executing program 0:

06:53:23 executing program 4:

06:53:23 executing program 3:

06:53:23 executing program 2:

[ 1603.813903][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:23 executing program 3:

06:53:23 executing program 5:

06:53:23 executing program 0:

06:53:23 executing program 1:

06:53:23 executing program 2:

06:53:23 executing program 4:

06:53:23 executing program 3:

06:53:24 executing program 2:

06:53:24 executing program 1:

06:53:24 executing program 2:

06:53:24 executing program 4:

06:53:24 executing program 3:

06:53:24 executing program 0:

[ 1604.053775][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:24 executing program 5:

06:53:24 executing program 1:

06:53:24 executing program 2:

06:53:24 executing program 4:

06:53:24 executing program 0:

06:53:24 executing program 3:

06:53:24 executing program 3:

06:53:24 executing program 2:

06:53:24 executing program 0:

06:53:24 executing program 1:

06:53:24 executing program 4:

06:53:24 executing program 2:

06:53:24 executing program 5:

06:53:24 executing program 3:

06:53:24 executing program 0:

06:53:24 executing program 2:

06:53:24 executing program 4:

06:53:24 executing program 1:

06:53:24 executing program 4:

06:53:24 executing program 3:

06:53:24 executing program 2:

06:53:24 executing program 0:

06:53:24 executing program 1:

06:53:24 executing program 4:

06:53:24 executing program 5:

06:53:24 executing program 0:

06:53:24 executing program 2:

06:53:24 executing program 3:

06:53:24 executing program 1:

06:53:24 executing program 4:

06:53:24 executing program 0:

06:53:24 executing program 1:

06:53:24 executing program 2:

06:53:24 executing program 3:

06:53:24 executing program 4:

06:53:24 executing program 1:

06:53:24 executing program 5:

06:53:24 executing program 0:

06:53:24 executing program 3:

06:53:24 executing program 2:

06:53:24 executing program 1:

06:53:24 executing program 4:

[ 1604.613920][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:24 executing program 3:

06:53:24 executing program 4:

06:53:24 executing program 1:

06:53:24 executing program 2:

06:53:24 executing program 0:

06:53:24 executing program 4:

06:53:24 executing program 3:

06:53:24 executing program 5:

06:53:24 executing program 1:

06:53:24 executing program 2:

06:53:24 executing program 0:

06:53:24 executing program 3:

06:53:24 executing program 4:

06:53:24 executing program 3:

06:53:24 executing program 1:

06:53:24 executing program 2:

06:53:24 executing program 4:

06:53:24 executing program 0:

06:53:24 executing program 3:

06:53:25 executing program 5:

06:53:25 executing program 1:

06:53:25 executing program 2:

06:53:25 executing program 4:

06:53:25 executing program 0:

06:53:25 executing program 3:

06:53:25 executing program 4:

06:53:25 executing program 1:

06:53:25 executing program 0:

06:53:25 executing program 2:

06:53:25 executing program 3:

06:53:25 executing program 4:

06:53:25 executing program 5:

06:53:25 executing program 2:

06:53:25 executing program 1:

06:53:25 executing program 3:

06:53:25 executing program 0:

06:53:25 executing program 4:

06:53:25 executing program 3:

06:53:25 executing program 0:

06:53:25 executing program 4:

06:53:25 executing program 1:

06:53:25 executing program 2:

06:53:25 executing program 3:

06:53:25 executing program 5:

06:53:25 executing program 2:

06:53:25 executing program 0:

06:53:25 executing program 1:

06:53:25 executing program 4:

06:53:25 executing program 3:

06:53:25 executing program 3:

06:53:25 executing program 2:

06:53:25 executing program 4:

06:53:25 executing program 0:

06:53:25 executing program 1:

06:53:25 executing program 2:

06:53:25 executing program 5:

06:53:25 executing program 3:

06:53:25 executing program 1:

06:53:25 executing program 0:

06:53:25 executing program 4:

06:53:25 executing program 2:

06:53:25 executing program 4:

06:53:25 executing program 1:

06:53:25 executing program 3:

06:53:25 executing program 0:

06:53:25 executing program 2:

06:53:25 executing program 0:

06:53:25 executing program 5:

06:53:25 executing program 4:

06:53:25 executing program 3:

06:53:25 executing program 1:

06:53:25 executing program 2:

06:53:25 executing program 0:

06:53:25 executing program 3:

06:53:25 executing program 0:

[ 1605.655807][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:25 executing program 4:

06:53:25 executing program 2:

06:53:25 executing program 1:

06:53:25 executing program 3:

06:53:25 executing program 5:

06:53:25 executing program 0:

06:53:25 executing program 4:

06:53:25 executing program 1:

06:53:25 executing program 3:

06:53:25 executing program 2:

06:53:25 executing program 0:

06:53:25 executing program 4:

06:53:25 executing program 3:

06:53:25 executing program 1:

06:53:25 executing program 2:

06:53:25 executing program 0:

06:53:26 executing program 5:

06:53:26 executing program 4:

06:53:26 executing program 3:

06:53:26 executing program 1:

06:53:26 executing program 2:

06:53:26 executing program 0:

06:53:26 executing program 2:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 0:

06:53:26 executing program 5:

06:53:26 executing program 2:

06:53:26 executing program 1:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 2:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 5:

06:53:26 executing program 3:

06:53:26 executing program 2:

06:53:26 executing program 4:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 2:

06:53:26 executing program 1:

06:53:26 executing program 0:

06:53:26 executing program 3:

06:53:26 executing program 5:

06:53:26 executing program 4:

06:53:26 executing program 1:

06:53:26 executing program 2:

06:53:26 executing program 3:

06:53:26 executing program 0:

06:53:26 executing program 4:

06:53:26 executing program 0:

06:53:26 executing program 2:

06:53:26 executing program 3:

06:53:26 executing program 1:

06:53:26 executing program 4:

06:53:26 executing program 5:

06:53:26 executing program 2:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 4:

06:53:26 executing program 3:

06:53:26 executing program 2:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 4:

[ 1606.694493][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:26 executing program 5:

06:53:26 executing program 2:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 2:

06:53:26 executing program 0:

06:53:26 executing program 1:

06:53:26 executing program 3:

06:53:26 executing program 4:

06:53:26 executing program 1:

06:53:27 executing program 5:

06:53:27 executing program 3:

06:53:27 executing program 0:

06:53:27 executing program 4:

06:53:27 executing program 2:

06:53:27 executing program 1:

06:53:27 executing program 0:

06:53:27 executing program 4:

06:53:27 executing program 1:

06:53:27 executing program 2:

06:53:27 executing program 0:

06:53:27 executing program 3:

[ 1607.093796][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:27 executing program 5:

06:53:27 executing program 1:

06:53:27 executing program 3:

06:53:27 executing program 4:

06:53:27 executing program 2:

06:53:27 executing program 0:

06:53:27 executing program 1:

06:53:27 executing program 0:

06:53:27 executing program 2:

06:53:27 executing program 4:

06:53:27 executing program 3:

06:53:27 executing program 0:

06:53:27 executing program 5:

06:53:27 executing program 2:

06:53:27 executing program 4:

06:53:27 executing program 1:

06:53:27 executing program 3:

06:53:27 executing program 0:

06:53:27 executing program 2:

06:53:27 executing program 4:

06:53:27 executing program 1:

06:53:27 executing program 0:

06:53:27 executing program 3:

06:53:27 executing program 2:

06:53:27 executing program 5:

06:53:27 executing program 4:

06:53:27 executing program 1:

06:53:27 executing program 3:

06:53:27 executing program 0:

06:53:27 executing program 2:

06:53:27 executing program 3:

06:53:27 executing program 0:

06:53:27 executing program 2:

06:53:27 executing program 1:

06:53:27 executing program 4:

06:53:27 executing program 0:

06:53:27 executing program 5:

06:53:27 executing program 3:

06:53:27 executing program 2:

06:53:27 executing program 4:

06:53:27 executing program 0:

06:53:27 executing program 1:

06:53:27 executing program 2:

06:53:27 executing program 3:

06:53:27 executing program 1:

06:53:27 executing program 0:

06:53:27 executing program 1:

06:53:27 executing program 4:

[ 1607.733959][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:27 executing program 5:

06:53:27 executing program 1:

06:53:27 executing program 3:

06:53:27 executing program 4:

06:53:27 executing program 0:

06:53:27 executing program 2:

06:53:27 executing program 4:

06:53:27 executing program 1:

06:53:27 executing program 2:

06:53:27 executing program 3:

06:53:27 executing program 0:

06:53:27 executing program 2:

06:53:28 executing program 5:

06:53:28 executing program 4:

06:53:28 executing program 1:

06:53:28 executing program 2:

06:53:28 executing program 3:

06:53:28 executing program 0:

06:53:28 executing program 4:

06:53:28 executing program 1:

06:53:28 executing program 2:

06:53:28 executing program 3:

06:53:28 executing program 0:

06:53:28 executing program 2:

06:53:28 executing program 5:

06:53:28 executing program 1:

06:53:28 executing program 0:

06:53:28 executing program 2:

06:53:28 executing program 4:

06:53:28 executing program 3:

06:53:28 executing program 1:

06:53:28 executing program 0:

06:53:28 executing program 3:

06:53:28 executing program 2:

06:53:28 executing program 4:

06:53:28 executing program 2:

06:53:28 executing program 5:

06:53:28 executing program 4:

06:53:28 executing program 0:

06:53:28 executing program 1:

06:53:28 executing program 2:

06:53:28 executing program 3:

06:53:28 executing program 3:

06:53:28 executing program 4:

06:53:28 executing program 0:

06:53:28 executing program 1:

06:53:28 executing program 2:

06:53:28 executing program 3:

06:53:28 executing program 5:

06:53:28 executing program 4:

06:53:28 executing program 0:

06:53:28 executing program 2:

06:53:28 executing program 1:

06:53:28 executing program 3:

06:53:28 executing program 0:

06:53:28 executing program 3:

06:53:28 executing program 2:

06:53:28 executing program 1:

06:53:28 executing program 4:

06:53:28 executing program 3:

06:53:28 executing program 5:

06:53:28 executing program 2:

06:53:28 executing program 1:

06:53:28 executing program 3:

06:53:28 executing program 4:

06:53:28 executing program 0:

06:53:28 executing program 2:

06:53:28 executing program 3:

06:53:28 executing program 4:

06:53:28 executing program 0:

06:53:28 executing program 1:

06:53:28 executing program 3:

06:53:28 executing program 5:

06:53:28 executing program 1:

06:53:28 executing program 2:

06:53:28 executing program 4:

06:53:28 executing program 0:

06:53:28 executing program 3:

[ 1608.785488][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:28 executing program 4:

06:53:28 executing program 1:

06:53:28 executing program 2:

06:53:28 executing program 3:

06:53:28 executing program 0:

06:53:28 executing program 1:

06:53:29 executing program 5:

06:53:29 executing program 4:

06:53:29 executing program 1:

06:53:29 executing program 2:

06:53:29 executing program 3:

06:53:29 executing program 0:

06:53:29 executing program 4:

06:53:29 executing program 3:

06:53:29 executing program 0:

06:53:29 executing program 2:

06:53:29 executing program 1:

06:53:29 executing program 3:

06:53:29 executing program 5:

06:53:29 executing program 4:

06:53:29 executing program 1:

06:53:29 executing program 2:

06:53:29 executing program 0:

06:53:29 executing program 3:

06:53:29 executing program 4:

06:53:29 executing program 1:

06:53:29 executing program 2:

06:53:29 executing program 3:

06:53:29 executing program 0:

06:53:29 executing program 1:

06:53:29 executing program 5:

06:53:29 executing program 2:

06:53:29 executing program 0:

06:53:29 executing program 3:

06:53:29 executing program 4:

06:53:29 executing program 1:

06:53:29 executing program 4:

06:53:29 executing program 1:

06:53:29 executing program 3:

06:53:29 executing program 0:

06:53:29 executing program 2:

06:53:29 executing program 2:

06:53:29 executing program 5:

06:53:29 executing program 0:

06:53:29 executing program 1:

06:53:29 executing program 4:

06:53:29 executing program 3:

06:53:29 executing program 2:

06:53:29 executing program 0:

06:53:29 executing program 3:

06:53:29 executing program 4:

06:53:29 executing program 1:

06:53:29 executing program 2:

06:53:29 executing program 0:

06:53:29 executing program 5:

06:53:29 executing program 4:

06:53:29 executing program 3:

06:53:29 executing program 0:

06:53:29 executing program 1:

06:53:29 executing program 2:

06:53:29 executing program 1:

06:53:29 executing program 4:

06:53:29 executing program 3:

06:53:29 executing program 0:

06:53:29 executing program 4:

06:53:29 executing program 2:

06:53:29 executing program 5:

06:53:29 executing program 1:

06:53:29 executing program 4:

06:53:29 executing program 2:

06:53:29 executing program 0:

06:53:29 executing program 3:

[ 1609.813871][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:29 executing program 2:

06:53:29 executing program 0:

06:53:29 executing program 1:

06:53:29 executing program 4:

06:53:29 executing program 3:

06:53:29 executing program 2:

06:53:30 executing program 5:

06:53:30 executing program 0:

06:53:30 executing program 4:

06:53:30 executing program 1:

06:53:30 executing program 3:

06:53:30 executing program 2:

06:53:30 executing program 0:

06:53:30 executing program 4:

06:53:30 executing program 3:

06:53:30 executing program 1:

06:53:30 executing program 2:

06:53:30 executing program 4:

06:53:30 executing program 5:

06:53:30 executing program 1:

06:53:30 executing program 0:

06:53:30 executing program 3:

06:53:30 executing program 2:

06:53:30 executing program 4:

[ 1610.134139][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:30 executing program 4:

06:53:30 executing program 3:

06:53:30 executing program 0:

06:53:30 executing program 1:

06:53:30 executing program 2:

06:53:30 executing program 0:

06:53:30 executing program 5:

06:53:30 executing program 2:

06:53:30 executing program 1:

06:53:30 executing program 4:

06:53:30 executing program 3:

06:53:30 executing program 0:

06:53:30 executing program 1:

06:53:30 executing program 0:

06:53:30 executing program 2:

06:53:30 executing program 4:

06:53:30 executing program 3:

06:53:30 executing program 2:

06:53:30 executing program 5:

06:53:30 executing program 0:

06:53:30 executing program 3:

06:53:30 executing program 2:

06:53:30 executing program 4:

06:53:30 executing program 1:

06:53:30 executing program 0:

06:53:30 executing program 2:

06:53:30 executing program 3:

06:53:30 executing program 1:

06:53:30 executing program 4:

06:53:30 executing program 0:

06:53:30 executing program 5:

06:53:30 executing program 2:

06:53:30 executing program 4:

06:53:30 executing program 3:

06:53:30 executing program 1:

06:53:30 executing program 0:

06:53:30 executing program 2:

06:53:30 executing program 0:

06:53:30 executing program 3:

06:53:30 executing program 1:

06:53:30 executing program 4:

06:53:30 executing program 2:

06:53:30 executing program 2:

06:53:30 executing program 5:

06:53:30 executing program 3:

06:53:30 executing program 0:

06:53:30 executing program 1:

06:53:30 executing program 4:

06:53:30 executing program 2:

[ 1610.853936][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:30 executing program 3:

06:53:30 executing program 1:

06:53:30 executing program 4:

06:53:30 executing program 0:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 5:

06:53:31 executing program 3:

06:53:31 executing program 4:

06:53:31 executing program 0:

06:53:31 executing program 1:

06:53:31 executing program 2:

06:53:31 executing program 3:

06:53:31 executing program 4:

06:53:31 executing program 1:

06:53:31 executing program 0:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 5:

06:53:31 executing program 4:

06:53:31 executing program 3:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 0:

06:53:31 executing program 4:

06:53:31 executing program 0:

06:53:31 executing program 3:

06:53:31 executing program 1:

06:53:31 executing program 2:

06:53:31 executing program 4:

06:53:31 executing program 5:

06:53:31 executing program 3:

06:53:31 executing program 0:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 4:

06:53:31 executing program 4:

06:53:31 executing program 1:

06:53:31 executing program 2:

06:53:31 executing program 3:

06:53:31 executing program 0:

06:53:31 executing program 1:

06:53:31 executing program 5:

06:53:31 executing program 4:

06:53:31 executing program 3:

06:53:31 executing program 0:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 1:

06:53:31 executing program 3:

06:53:31 executing program 4:

06:53:31 executing program 0:

06:53:31 executing program 2:

06:53:31 executing program 4:

06:53:31 executing program 5:

06:53:31 executing program 0:

06:53:31 executing program 3:

06:53:31 executing program 1:

06:53:31 executing program 2:

06:53:31 executing program 4:

06:53:31 executing program 1:

06:53:31 executing program 0:

06:53:31 executing program 4:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 3:

06:53:31 executing program 5:

06:53:31 executing program 4:

06:53:31 executing program 3:

06:53:31 executing program 0:

06:53:31 executing program 2:

06:53:31 executing program 1:

06:53:31 executing program 2:

06:53:31 executing program 0:

06:53:31 executing program 3:

06:53:31 executing program 4:

06:53:31 executing program 1:

[ 1611.903834][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:32 executing program 2:

06:53:32 executing program 0:

06:53:32 executing program 5:

06:53:32 executing program 2:

06:53:32 executing program 4:

06:53:32 executing program 1:

06:53:32 executing program 3:

06:53:32 executing program 4:

06:53:32 executing program 3:

06:53:32 executing program 1:

06:53:32 executing program 0:

06:53:32 executing program 2:

06:53:32 executing program 4:

06:53:32 executing program 5:

06:53:32 executing program 0:

06:53:32 executing program 3:

06:53:32 executing program 2:

06:53:32 executing program 1:

06:53:32 executing program 4:

06:53:32 executing program 3:

06:53:32 executing program 1:

06:53:32 executing program 0:

06:53:32 executing program 4:

06:53:32 executing program 2:

06:53:32 executing program 0:

06:53:32 executing program 5:

06:53:32 executing program 3:

06:53:32 executing program 4:

06:53:32 executing program 2:

06:53:32 executing program 1:

06:53:32 executing program 0:

06:53:32 executing program 1:

06:53:32 executing program 2:

06:53:32 executing program 0:

06:53:32 executing program 4:

06:53:32 executing program 3:

06:53:32 executing program 4:

06:53:32 executing program 5:

06:53:32 executing program 1:

06:53:32 executing program 0:

06:53:32 executing program 2:

06:53:32 executing program 3:

06:53:32 executing program 4:

06:53:32 executing program 3:

06:53:32 executing program 4:

06:53:32 executing program 2:

06:53:32 executing program 1:

06:53:32 executing program 0:

06:53:32 executing program 4:

06:53:32 executing program 5:

06:53:32 executing program 3:

06:53:32 executing program 1:

06:53:32 executing program 2:

06:53:32 executing program 4:

06:53:32 executing program 0:

06:53:32 executing program 3:

06:53:32 executing program 0:

06:53:32 executing program 1:

06:53:32 executing program 4:

06:53:32 executing program 2:

06:53:32 executing program 1:

06:53:32 executing program 5:

06:53:32 executing program 0:

06:53:32 executing program 3:

06:53:32 executing program 4:

06:53:32 executing program 2:

06:53:32 executing program 1:

06:53:32 executing program 3:

06:53:32 executing program 2:

06:53:32 executing program 1:

06:53:32 executing program 4:

06:53:32 executing program 0:

06:53:33 executing program 2:

[ 1612.943850][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:33 executing program 5:

06:53:33 executing program 2:

06:53:33 executing program 1:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 3:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 1:

06:53:33 executing program 2:

06:53:33 executing program 5:

06:53:33 executing program 4:

06:53:33 executing program 1:

06:53:33 executing program 3:

06:53:33 executing program 0:

06:53:33 executing program 2:

[ 1613.173758][T25615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:33 executing program 3:

06:53:33 executing program 2:

06:53:33 executing program 0:

06:53:33 executing program 1:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 5:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:33 executing program 1:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 1:

[ 1613.413764][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:33 executing program 2:

06:53:33 executing program 4:

06:53:33 executing program 5:

06:53:33 executing program 0:

06:53:33 executing program 1:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:33 executing program 4:

06:53:33 executing program 1:

06:53:33 executing program 0:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:33 executing program 4:

06:53:33 executing program 2:

06:53:33 executing program 5:

06:53:33 executing program 0:

06:53:33 executing program 1:

06:53:33 executing program 4:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:33 executing program 2:

06:53:33 executing program 1:

06:53:33 executing program 0:

06:53:33 executing program 3:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 5:

06:53:33 executing program 3:

06:53:33 executing program 1:

06:53:33 executing program 2:

06:53:33 executing program 4:

06:53:33 executing program 0:

06:53:33 executing program 1:

06:53:33 executing program 2:

06:53:33 executing program 3:

06:53:34 executing program 4:

06:53:34 executing program 0:

06:53:34 executing program 3:

[ 1613.973821][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:34 executing program 5:

06:53:34 executing program 1:

06:53:34 executing program 2:

06:53:34 executing program 0:

06:53:34 executing program 4:

06:53:34 executing program 3:

06:53:34 executing program 2:

06:53:34 executing program 0:

06:53:34 executing program 4:

06:53:34 executing program 1:

06:53:34 executing program 3:

06:53:34 executing program 2:

06:53:34 executing program 5:

06:53:34 executing program 1:

06:53:34 executing program 0:

06:53:34 executing program 3:

06:53:34 executing program 2:

06:53:34 executing program 4:

06:53:34 executing program 3:

06:53:34 executing program 0:

06:53:34 executing program 2:

06:53:34 executing program 1:

06:53:34 executing program 3:

06:53:34 executing program 4:

06:53:34 executing program 5:

06:53:34 executing program 2:

06:53:34 executing program 3:

06:53:34 executing program 1:

06:53:34 executing program 4:

06:53:34 executing program 0:

06:53:34 executing program 2:

06:53:34 executing program 1:

06:53:34 executing program 4:

06:53:34 executing program 3:

06:53:34 executing program 0:

06:53:34 executing program 2:

06:53:34 executing program 5:

06:53:34 executing program 1:

06:53:34 executing program 0:

06:53:34 executing program 4:

06:53:34 executing program 3:

06:53:34 executing program 2:

06:53:34 executing program 2:

06:53:34 executing program 4:

06:53:34 executing program 1:

06:53:34 executing program 0:

06:53:34 executing program 3:

06:53:34 executing program 1:

06:53:34 executing program 5:

06:53:34 executing program 3:

06:53:34 executing program 1:

06:53:34 executing program 2:

06:53:34 executing program 0:

06:53:34 executing program 4:

06:53:34 executing program 2:

06:53:34 executing program 4:

06:53:34 executing program 1:

06:53:34 executing program 0:

06:53:34 executing program 3:

06:53:34 executing program 2:

06:53:34 executing program 5:

06:53:34 executing program 1:

06:53:34 executing program 4:

06:53:34 executing program 0:

06:53:34 executing program 2:

06:53:34 executing program 3:

06:53:34 executing program 2:

06:53:34 executing program 3:

06:53:35 executing program 4:

06:53:35 executing program 0:

06:53:35 executing program 1:

06:53:35 executing program 2:

[ 1615.014058][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:35 executing program 5:

06:53:35 executing program 3:

06:53:35 executing program 1:

06:53:35 executing program 0:

06:53:35 executing program 4:

06:53:35 executing program 2:

06:53:35 executing program 1:

06:53:35 executing program 0:

06:53:35 executing program 4:

06:53:35 executing program 1:

06:53:35 executing program 2:

06:53:35 executing program 3:

06:53:35 executing program 5:

06:53:35 executing program 4:

06:53:35 executing program 3:

06:53:35 executing program 1:

06:53:35 executing program 0:

06:53:35 executing program 2:

06:53:35 executing program 2:

06:53:35 executing program 0:

06:53:35 executing program 1:

06:53:35 executing program 4:

06:53:35 executing program 3:

06:53:35 executing program 1:

06:53:35 executing program 5:

06:53:35 executing program 3:

06:53:35 executing program 4:

06:53:35 executing program 1:

06:53:35 executing program 2:

06:53:35 executing program 0:

06:53:35 executing program 3:

06:53:35 executing program 1:

06:53:35 executing program 2:

06:53:35 executing program 4:

06:53:35 executing program 0:

06:53:35 executing program 0:

06:53:35 executing program 5:

06:53:35 executing program 1:

06:53:35 executing program 3:

06:53:35 executing program 2:

06:53:35 executing program 4:

06:53:35 executing program 0:

06:53:35 executing program 0:

06:53:35 executing program 4:

06:53:35 executing program 3:

06:53:35 executing program 1:

06:53:35 executing program 2:

06:53:35 executing program 3:

06:53:35 executing program 5:

06:53:35 executing program 0:

06:53:35 executing program 4:

06:53:35 executing program 1:

06:53:35 executing program 3:

06:53:35 executing program 2:

06:53:35 executing program 2:

06:53:35 executing program 3:

06:53:35 executing program 4:

06:53:35 executing program 0:

06:53:35 executing program 1:

06:53:35 executing program 4:

06:53:35 executing program 5:

06:53:35 executing program 2:

06:53:35 executing program 3:

06:53:35 executing program 1:

06:53:35 executing program 0:

06:53:35 executing program 4:

06:53:35 executing program 1:

06:53:35 executing program 3:

06:53:36 executing program 1:

06:53:36 executing program 4:

06:53:36 executing program 0:

06:53:36 executing program 2:

06:53:36 executing program 5:

06:53:36 executing program 3:

06:53:36 executing program 1:

06:53:36 executing program 0:

06:53:36 executing program 2:

06:53:36 executing program 4:

[ 1616.054117][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:36 executing program 1:

06:53:36 executing program 3:

06:53:36 executing program 2:

06:53:36 executing program 4:

06:53:36 executing program 0:

06:53:36 executing program 2:

06:53:36 executing program 5:

06:53:36 executing program 0:

06:53:36 executing program 1:

06:53:36 executing program 4:

06:53:36 executing program 2:

06:53:36 executing program 3:

[ 1616.219105][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:36 executing program 1:

06:53:36 executing program 3:

06:53:36 executing program 0:

06:53:36 executing program 2:

06:53:36 executing program 4:

06:53:36 executing program 0:

06:53:36 executing program 5:

06:53:36 executing program 1:

06:53:36 executing program 4:

06:53:36 executing program 3:

06:53:36 executing program 2:

06:53:36 executing program 0:

06:53:36 executing program 1:

06:53:36 executing program 4:

06:53:36 executing program 2:

06:53:36 executing program 0:

06:53:36 executing program 3:

06:53:36 executing program 4:

06:53:36 executing program 5:

06:53:36 executing program 1:

06:53:36 executing program 3:

06:53:36 executing program 0:

06:53:36 executing program 2:

06:53:36 executing program 4:

06:53:36 executing program 0:

06:53:36 executing program 4:

06:53:36 executing program 2:

06:53:36 executing program 1:

06:53:36 executing program 3:

06:53:36 executing program 0:

06:53:36 executing program 5:

06:53:36 executing program 1:

06:53:36 executing program 2:

06:53:36 executing program 3:

06:53:36 executing program 4:

06:53:36 executing program 0:

06:53:36 executing program 1:

06:53:36 executing program 3:

06:53:36 executing program 0:

06:53:36 executing program 2:

06:53:36 executing program 4:

06:53:36 executing program 2:

06:53:36 executing program 5:

06:53:36 executing program 0:

06:53:36 executing program 1:

06:53:36 executing program 3:

06:53:36 executing program 4:

06:53:36 executing program 2:

06:53:36 executing program 2:

06:53:36 executing program 0:

06:53:37 executing program 4:

06:53:37 executing program 3:

06:53:37 executing program 1:

06:53:37 executing program 2:

06:53:37 executing program 5:

06:53:37 executing program 0:

06:53:37 executing program 3:

06:53:37 executing program 4:

06:53:37 executing program 1:

06:53:37 executing program 2:

06:53:37 executing program 4:

06:53:37 executing program 3:

06:53:37 executing program 2:

06:53:37 executing program 1:

[ 1617.101352][ T2085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:37 executing program 0:

06:53:37 executing program 2:

06:53:37 executing program 5:

06:53:37 executing program 4:

06:53:37 executing program 1:

06:53:37 executing program 3:

06:53:37 executing program 0:

06:53:37 executing program 2:

06:53:37 executing program 1:

06:53:37 executing program 0:

06:53:37 executing program 3:

06:53:37 executing program 4:

06:53:37 executing program 2:

06:53:37 executing program 1:

06:53:37 executing program 5:

06:53:37 executing program 0:

06:53:37 executing program 3:

06:53:37 executing program 4:

06:53:37 executing program 1:

06:53:37 executing program 2:

06:53:37 executing program 0:

06:53:37 executing program 3:

06:53:37 executing program 4:

06:53:37 executing program 1:

06:53:37 executing program 2:

06:53:37 executing program 0:

06:53:37 executing program 5:

06:53:37 executing program 1:

06:53:37 executing program 4:

06:53:37 executing program 0:

06:53:37 executing program 3:

06:53:37 executing program 2:

06:53:37 executing program 0:

06:53:37 executing program 4:

06:53:37 executing program 1:

06:53:37 executing program 2:

06:53:37 executing program 3:

06:53:37 executing program 0:

06:53:37 executing program 5:

06:53:37 executing program 4:

06:53:37 executing program 2:

06:53:37 executing program 3:

06:53:37 executing program 1:

06:53:37 executing program 0:

06:53:37 executing program 2:

06:53:37 executing program 3:

06:53:37 executing program 0:

06:53:37 executing program 1:

06:53:37 executing program 4:

06:53:37 executing program 2:

06:53:37 executing program 5:

06:53:37 executing program 3:

06:53:37 executing program 0:

06:53:37 executing program 1:

06:53:37 executing program 2:

06:53:37 executing program 4:

06:53:38 executing program 0:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 1:

06:53:38 executing program 2:

06:53:38 executing program 3:

06:53:38 executing program 5:

06:53:38 executing program 0:

06:53:38 executing program 3:

06:53:38 executing program 4:

06:53:38 executing program 2:

06:53:38 executing program 1:

06:53:38 executing program 3:

06:53:38 executing program 1:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 0:

06:53:38 executing program 1:

[ 1618.149547][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:38 executing program 5:

06:53:38 executing program 3:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 1:

06:53:38 executing program 0:

06:53:38 executing program 3:

06:53:38 executing program 4:

06:53:38 executing program 2:

06:53:38 executing program 1:

06:53:38 executing program 0:

06:53:38 executing program 4:

06:53:38 executing program 5:

06:53:38 executing program 1:

06:53:38 executing program 3:

06:53:38 executing program 0:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 3:

06:53:38 executing program 1:

06:53:38 executing program 2:

06:53:38 executing program 0:

06:53:38 executing program 4:

06:53:38 executing program 3:

06:53:38 executing program 5:

06:53:38 executing program 1:

06:53:38 executing program 4:

06:53:38 executing program 2:

06:53:38 executing program 0:

06:53:38 executing program 3:

06:53:38 executing program 0:

06:53:38 executing program 4:

06:53:38 executing program 2:

06:53:38 executing program 1:

06:53:38 executing program 3:

06:53:38 executing program 0:

06:53:38 executing program 5:

06:53:38 executing program 0:

06:53:38 executing program 3:

06:53:38 executing program 1:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 3:

06:53:38 executing program 0:

06:53:38 executing program 1:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 1:

06:53:38 executing program 5:

06:53:38 executing program 0:

06:53:38 executing program 2:

06:53:38 executing program 4:

06:53:38 executing program 1:

06:53:38 executing program 3:

06:53:39 executing program 1:

06:53:39 executing program 0:

06:53:39 executing program 2:

06:53:39 executing program 3:

06:53:39 executing program 1:

06:53:39 executing program 4:

06:53:39 executing program 5:

06:53:39 executing program 4:

06:53:39 executing program 3:

06:53:39 executing program 1:

06:53:39 executing program 2:

06:53:39 executing program 0:

06:53:39 executing program 3:

06:53:39 executing program 4:

06:53:39 executing program 2:

06:53:39 executing program 1:

06:53:39 executing program 0:

06:53:39 executing program 1:

06:53:39 executing program 4:

[ 1619.174453][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:39 executing program 5:

06:53:39 executing program 0:

06:53:39 executing program 3:

06:53:39 executing program 2:

06:53:39 executing program 1:

06:53:39 executing program 4:

[ 1619.255752][T25787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
06:53:39 executing program 1:

06:53:39 executing program 4:

06:53:39 executing program 3:

06:53:39 executing program 2:

06:53:39 executing program 0:

06:53:39 executing program 4:

06:53:39 executing program 5:

06:53:39 executing program 1:

06:53:39 executing program 2:

06:53:39 executing program 3:

06:53:39 executing program 0:

06:53:39 executing program 4:

06:53:39 executing program 3:

06:53:39 executing program 0:

06:53:39 executing program 4:

06:53:39 executing program 2:

06:53:39 executing program 1:

06:53:39 executing program 3:

06:53:39 executing program 5:

06:53:39 executing program 1:

06:53:39 executing program 3:

06:53:39 executing program 0:

06:53:39 executing program 4:

06:53:39 executing program 2:

06:53:39 executing program 1:

06:53:39 executing program 2:

06:53:39 executing program 3:

06:53:39 executing program 0:

06:53:39 executing program 4:

06:53:39 executing program 1:

06:53:39 executing program 5:

06:53:39 executing program 0:

06:53:39 executing program 3:

06:53:39 executing program 2:

06:53:39 executing program 4:

06:53:39 executing program 1:

06:53:39 executing program 0:

06:53:39 executing program 3:

06:53:39 executing program 4:

06:53:39 executing program 1:

06:53:39 executing program 2:

06:53:39 executing program 2:

06:53:39 executing program 5:

06:53:39 executing program 0:

06:53:39 executing program 4:

06:53:39 executing program 3:

06:53:39 executing program 1:

06:53:39 executing program 2:

06:53:40 executing program 0:

06:53:40 executing program 4:

06:53:40 executing program 2:

06:53:40 executing program 1:
r0 = memfd_create(&(0x7f00000004c0)='}+lo\x00uMH\xf2}\x9fMY}\t\xfd\xc2\xab\xdf\x01N\xcc:\x82!\xc6V\x1c>\xf0\xbc\xd7\xe6\x17W.\xe0\x89\xcb\x02c\xbe\x82\vB\x87\xedL\x90\xde\x9b\xed\x17D\x8c\xae\xd4\xf7R\xb4H!\xd79&\xa7\xe6\xb6\xd0\xcd\x81\xc9\v\x19fg\x04I\xdf5\xaaE\xa7\xcb\xec\x89VsV\x83\x91$\xfbP}\x92w\x86\x81\xbdiZ8\x8f\xfc\x96U\x9d\xc4\x8e-0x-\xa5\a\x9e\xb3\x0f\xdf\\\xbf\xe1\xbby\x91o\x1245\xf0b!\xce\xfa9s\xb0B3v', 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000000080))
r1 = dup(r0)
write$P9_RFLUSH(r1, 0x0, 0x0)

06:53:40 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683540150024001b0000fcffffff0000593ab782115ed9443d51d7e88dc62b2ca654a6613b6a480000001cbc882b079881", 0x4c}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0)

06:53:40 executing program 2:

[ 1620.073440][  T382] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[ 1620.087957][  T382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
06:53:40 executing program 5:

06:53:40 executing program 4:

06:53:40 executing program 1:

06:53:40 executing program 0:

06:53:40 executing program 2:

06:53:40 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683540150024001b0000fcffffff0000593ab782115ed9443d51d7e88dc62b2ca654a6613b6a480000001cbc882b079881", 0x4c}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0)

[ 1620.123855][  T384] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[ 1620.132022][  T384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
06:53:40 executing program 4:

06:53:40 executing program 0:

06:53:40 executing program 1:

06:53:40 executing program 2:

06:53:40 executing program 4:

06:53:40 executing program 0:

[ 1620.202347][  T392] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[ 1620.214081][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1620.227689][  T392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
06:53:40 executing program 5:

06:53:40 executing program 1:

06:53:40 executing program 3:

06:53:40 executing program 2:

06:53:40 executing program 4:

06:53:40 executing program 0:

06:53:40 executing program 0:

06:53:40 executing program 1:

06:53:40 executing program 2:

06:53:40 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

06:53:40 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40002, 0x0)
write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x1, 0x2}, 0x8)

06:53:40 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x1b, 0x0, 0x0, 0x0, @in={0xa, 0x0, @multicast1}}]}, 0x28}}, 0x0)

06:53:40 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="3504000039000511d25a80648c63940d0124fc60100035400c0002000200000037153e370a04018004000000d1bd", 0x33fe0}], 0x1}, 0x0)

06:53:40 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0)

06:53:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x2eb2aaea, 0x7}]})

06:53:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x28, r1, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x8}]}]}]}, 0x28}}, 0x0)

06:53:40 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x10008002)
write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x23}], 0x1)

06:53:40 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}})

06:53:40 executing program 1:
syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b)
ftruncate(r0, 0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000000280)='U', 0x1)
sendfile(r0, r4, 0x0, 0x8400fffffffa)

06:53:40 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@random="4dfc1512024e", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e9a25e", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

06:53:40 executing program 3:
r0 = socket(0xa, 0x3, 0x3)
getsockopt$nfc_llcp(r0, 0x29, 0x43, 0x0, 0x960000)

06:53:40 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}})

06:53:40 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
unshare(0x2a000400)
bpf$BPF_PROG_TEST_RUN(0x6, 0x0, 0x0)

06:53:40 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r0 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0)
mq_getsetattr(r0, 0x0, 0x0)

[ 1620.682375][   T28] audit: type=1804 audit(1601276020.689:380): pid=446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16233 res=1 errno=0
06:53:40 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}})

06:53:40 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0205649, &(0x7f0000000440)={0xf010000, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e514c858"}, 0x0, 0x0, @fd})

06:53:40 executing program 4:
clock_adjtime(0x73c06eef6a8f7ee6, &(0x7f0000000080))

06:53:40 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc7539(ctr-twofish-3way,blake2s-128-generic))\x00'}, 0x58)

06:53:40 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='|\x00')

06:53:40 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="c2", 0x1f0, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1621.253783][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1621.433261][   T28] audit: type=1804 audit(1601276021.439:381): pid=485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="bus" dev="sda1" ino=16233 res=1 errno=0
[ 1621.453665][  T446] ==================================================================
[ 1621.455045][   T28] audit: type=1804 audit(1601276021.459:382): pid=485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16233 res=1 errno=0