last executing test programs: 2.889795965s ago: executing program 0 (id=6): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xae34, 0x40a, 0x1, 0x203a5}, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb9a8, 0x200, 0x2, 0x1e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb0a6, 0x1000, 0x0, 0x113}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc649, 0x1000, 0xfffffffe, 0x163}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x20, 0x1, 0x53}, 0xffffffffffffffff}], 0x4, &(0x7f0000002040)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7ff}, 0x0, 0x0, '\x00', {0x2, 0x254, 0x0, &(0x7f0000001040)=@buf_512="41c3c832c5d26d0ba2d4e8044a0141eb90088b4aa3c82d42335ba8324c6a896644967d2a4eadfba230abc247c95256b6ea6b99fd2fb3273163a21306a0d2387d7a628d0ef2dcf26db8e80bdfc29f0ea0bda470b5f950dab206a1bf160a7c56d16c13356ee61d0576905512fc25e99aa53e1f8976bc6ecd07cfc248845c6eab202d26173e23fc0fe036dce0c68177afdcbe615848726ce0856d547ebba494f1ce1bb15c22bea411333535c22cf936184081910359b4a09bf1076bad5b7e63929821df285d36e56e09d807e4e5e5f83d55b2618c8d2bb7a8555bd125ea46d23591ab832ac064fc642c0b0ed95cc007c528d969f50e7ea08d4444e20dbded538f9434ed779c58e039e5c8bbff6d074e62c889e27b116c0a09fed678c2961e104a408e2cf33f12134cfb8de6dfa5c695e704f5977b4e2545c47be40cbc0692f7fb6d9e9ac11efd97c63267711259bc945bfb4bdbeb36ce0b0c00e0f2095981862a9e5deb5d11bdc86d16fb84e92b5e7da7e4eb3802ed03f62ad3f3d34d2e3c6314254f65f40ed0eef00d42c2e89fbc1611599410372f2a5705c7972b472f2a72299358c3131e1d3c91189f0e3e0b0bd35ba7a12ac5de15f4162fcfe4744d8db2258c70b8df866b224a1c84fbc6384034eb6c1230d8935e0c09e60284081989a0d1f8a2022c4d06e1f561698fbc320bcf33e08265e2b161faf0de286d0cf85d47799f"}}, &(0x7f00000020c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa0b00, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) syz_ublk_setup_io_uring(0x2d56, &(0x7f0000002100)={0x0, 0x8595, 0x1, 0x0, 0x3d1, 0x0, r0}, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680), 0x0, 0x48d, &(0x7f0000000b80)="$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") 1.710571491s ago: executing program 0 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x62020600) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e25d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000001280)={0x1f, 0x0, @any, 0x7ff, 0x1}, 0xe) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000080)) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002dbd7000ffdbdf25ff010000000000000000000000000001ac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) unshare(0x22020600) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x74, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x2, 0x3, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f0000000040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000202010100000000000000000a000008180002801400018008000100ac14141e08000200ffffffbf"], 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x20040800) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)=""/249) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000368c3668284e7c4d618c072d1dec0000000000d48ceaec3263b6ceb5ba000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000240)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00'}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1477, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x32, 0x8, 0x1, {0x22, 0x7a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xbe, 0x3e, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xe4, 0x9}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x7e, 0x6, 0x9, 0xff, 0x3}, 0xf, &(0x7f00000007c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x0, 0x7}]}, 0x2, [{0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="45033296483608f09cb46c8c0ac57048fe485bb54da8d34c6124514e1566e3e3b0103efdc8c7b6959455fe56da0bbc4a8f1a75fb63cac864af1d0f232e0a0c788ce296c377efacb6ae12d36940fa3e3130290a96790b4447c4"]}, {0x2f, &(0x7f0000000b00)=ANY=[@ANYBLOB="2f036a0f0b34989aa283f74fdbe278ae7b8d23b033726a0ffaf23beb6f5f6dd64d5cc622a9752c645dac3654d1758409b3b15d5ee465cb8d48846249ab37db1be8db2cbd01fafbb5b05bf0f032e9610a1cf461b8ab1998727517c008e7b97d9fc84082e85f49ff391a88219c10eb3e81457295dbb4a6fc6e6719b5fb8d7ddf6458a5b28941d3a331d103a6c05f3badb7658f4efda85113a2c8d814c65e3919"]}]}) 695.897948ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)='\vw', 0x2}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000005c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 501.926817ms ago: executing program 0 (id=8): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x20, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a0, &(0x7f00000005c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x20, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a0, &(0x7f00000005c0)="$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") (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) (async) 299.781826ms ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5f, 0x3}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f0000000200), 0x3, 0x54b, &(0x7f00000002c0)="$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") 298.829236ms ago: executing program 1 (id=2): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xdc, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x11}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x79}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8054}, 0x24000001) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xbc}}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x68}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) (async) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xdc, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x11}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x79}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8054}, 0x24000001) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xbc}}, 0x40040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x68}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 240.507269ms ago: executing program 3 (id=4): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[], 0x1, 0x552d, &(0x7f00000004c0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x87) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_gettime(r2, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chdir(&(0x7f0000000000)='./file0\x00') setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) 104.646355ms ago: executing program 4 (id=5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000f00)={[{@shortname_mixed}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@quiet}]}, 0x0, 0x28f, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) accept$unix(r0, &(0x7f0000000340)=@abs, &(0x7f0000000400)=0x6e) socket$inet_tcp(0x2, 0x1, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4096, 0x1000) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5", 0x5}], 0x1}, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) accept4$inet(r2, 0x0, &(0x7f00000001c0), 0x100800) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0xfffffffffffffde5, &(0x7f0000000140)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0x211, 0x709d28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0x1, 0x1}, {0x0, 0xe}}, [{0x4, 0xb, 0xcab7}, {0x8, 0xb, 0xfffffff7}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) write(r3, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fd100f000ee1000c", 0x1c) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) recvmsg$unix(r1, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}, 0x2020) syz_usb_connect$rtl8150(0x5, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x7c4, 0xa000, 0x1, 0x1, 0x2, 0x3, 0x28, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x0, 0x0, 0x3, 0x8, 0x6, 0xf2}}}}]}}, 0x0) 37.701318ms ago: executing program 0 (id=10): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8000, 0x4, 0xa8, 0x4, 0x1, 0x0}) ioprio_get$pid(0x1, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0x7ff, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0x7ff, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa47}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x205, &(0x7f0000002500)=0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_getevents(r3, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPA(r6, 0xc020582c, &(0x7f0000000040)={0x7, 0x6, 0x62, 0x7}) (async) ioctl$XFS_IOC_GETBMAPA(r6, 0xc020582c, &(0x7f0000000040)={0x7, 0x6, 0x62, 0x7}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r7, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) lseek(r7, 0x1ff, 0x3) 37.205708ms ago: executing program 0 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xdc, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x11}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x79}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8054}, 0x24000001) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000280), 0x0}, 0x20) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xee0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffeff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x85a}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48015}, 0x4004) 0s ago: executing program 32 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xdc, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x11}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x79}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8054}, 0x24000001) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000280), 0x0}, 0x20) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xee0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffeff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x85a}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48015}, 0x4004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 23.004047][ T28] audit: type=1400 audit(1790002764.057:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.007734][ T279] cgroup: Unknown subsys name 'net' [ 23.026721][ T28] audit: type=1400 audit(1790002764.057:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.054078][ T28] audit: type=1400 audit(1790002764.097:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.054560][ T279] cgroup: Unknown subsys name 'devices' [ 23.198438][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.204109][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.309567][ T28] audit: type=1400 audit(1790002764.367:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.332899][ T28] audit: type=1400 audit(1790002764.367:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.357716][ T28] audit: type=1400 audit(1790002764.367:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.386181][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.395078][ T28] audit: type=1400 audit(1790002764.457:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.420908][ T28] audit: type=1400 audit(1790002764.457:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.447008][ T28] audit: type=1400 audit(1790002764.507:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.472632][ T28] audit: type=1400 audit(1790002764.507:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.472715][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.731297][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.738419][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.745856][ T287] device bridge_slave_0 entered promiscuous mode [ 24.752995][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.760132][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.767674][ T287] device bridge_slave_1 entered promiscuous mode [ 24.814727][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.821848][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.829196][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.836244][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.858721][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.866040][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.873516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.881402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.890566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.898971][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.906003][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.914940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.923159][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.930244][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.943089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.952655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.967609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.979739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.987853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.995282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.003831][ T287] device veth0_vlan entered promiscuous mode [ 25.014741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.023890][ T287] device veth1_macvtap entered promiscuous mode [ 25.033926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.044029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.063276][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 25.378135][ T8] device offline error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 39 prio class 2 [ 25.389119][ T8] device offline error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 46 prio class 2 [ 25.402923][ T8] device offline error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2 [ 25.436502][ T8] device offline error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 43 prio class 2 [ 25.455583][ T8] device offline error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 55 prio class 2 [ 25.465218][ T300] loop0: detected capacity change from 0 to 512 [ 25.475349][ T8] device offline error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x4000 phys_seg 43 prio class 2 [ 25.489019][ T8] device offline error, dev sda, sector 281904 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 25.500133][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35238) [ 25.512800][ T8] device offline error, dev sda, sector 281966 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2 [ 25.523769][ T8] device offline error, dev sda, sector 282472 op 0x1:(WRITE) flags 0x4000 phys_seg 40 prio class 2 [ 25.534996][ T8] device offline error, dev sda, sector 282984 op 0x1:(WRITE) flags 0x4000 phys_seg 54 prio class 2 [ 25.547976][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35565) [ 25.548071][ T300] EXT4-fs (loop0): orphan cleanup on readonly fs [ 25.560632][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35907) [ 25.578008][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35959) [ 25.578238][ T300] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.6: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 25.597579][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139302) [ 25.605027][ T308] Buffer I/O error on device sda1, logical block 35921 [ 25.618080][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139434) [ 25.635529][ T308] Buffer I/O error on device sda1, logical block 35922 [ 25.642203][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139467) [ 25.643018][ T308] Buffer I/O error on device sda1, logical block 35923 [ 25.654354][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139484) [ 25.668139][ T308] Buffer I/O error on device sda1, logical block 35924 [ 25.679361][ T300] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.6: ea_inode dec ref err=-117 [ 25.688495][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139493) [ 25.703631][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139500) [ 25.708238][ T308] Buffer I/O error on device sda1, logical block 35925 [ 25.722360][ T300] EXT4-fs (loop0): 1 orphan inode deleted [ 25.731361][ T308] Buffer I/O error on device sda1, logical block 35926 [ 25.737240][ T300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.738868][ T308] Buffer I/O error on device sda1, logical block 35927 [ 25.755595][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.762730][ T308] Buffer I/O error on device sda1, logical block 35928 [ 25.762845][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.769687][ T308] Buffer I/O error on device sda1, logical block 35929 [ 25.769705][ T308] Buffer I/O error on device sda1, logical block 35930 [ 25.798486][ T298] device bridge_slave_0 entered promiscuous mode [ 25.801196][ T66] Aborting journal on device sda1-8. [ 25.810283][ T303] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 25.810319][ T303] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 25.830348][ T303] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 25.831043][ T66] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 25.838903][ T303] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 25.849199][ T66] JBD2: I/O error when updating journal superblock for sda1-8. [ 25.856012][ T303] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 25.872251][ T303] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 25.880729][ T303] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 25.889187][ T303] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 25.897643][ T303] Buffer I/O error on dev sda1, logical block 243, lost async page write [ 25.907065][ T308] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm kworker/u4:4: Detected aborted journal [ 25.918436][ T308] EXT4-fs (sda1): I/O error while writing superblock [ 25.925205][ T308] EXT4-fs (sda1): Remounting filesystem read-only [ 25.931925][ T308] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775806 pages, ino 2028; err -30 [ 25.941188][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.949332][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.957113][ T298] device bridge_slave_1 entered promiscuous mode [ 25.967671][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.974739][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.982506][ T301] device bridge_slave_0 entered promiscuous mode [ 25.996490][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.003749][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.011401][ T297] device bridge_slave_0 entered promiscuous mode [ 26.023789][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.031486][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.039402][ T301] device bridge_slave_1 entered promiscuous mode [ 26.046033][ T303] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 26.058609][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.065745][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.073714][ T297] device bridge_slave_1 entered promiscuous mode [ 26.090031][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.097181][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.104771][ T302] device bridge_slave_0 entered promiscuous mode [ 26.130025][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.137182][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.142195][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.145731][ T302] device bridge_slave_1 entered promiscuous mode [ 26.171629][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.205133][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.247997][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.265269][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.281432][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.306600][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.324558][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.333882][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.344701][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.353386][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.364192][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.388554][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.401448][ T299] EXT4-fs (sda1): Remounting filesystem read-only [ 26.439292][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.466838][ T299] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.6: Detected aborted journal [ 26.504170][ T287] EXT4-fs (loop0): unmounting filesystem. [ 26.514867][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.522059][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.529371][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.536472][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.568887][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.575973][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.583327][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.590395][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.608938][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.616235][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.624665][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.632426][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.641079][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.648612][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.678278][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.686738][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.695059][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.702268][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.711443][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.720313][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.728650][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.735704][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.746972][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.777491][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.790641][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.801274][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.809223][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.821597][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.829422][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.837434][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.846006][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.860976][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.868083][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.890125][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.899141][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.906927][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.914536][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.923026][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.930110][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.938436][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.946891][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.953979][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.961499][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.969992][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.978299][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.985325][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.992787][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.012174][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.020672][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.029212][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.036277][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.044097][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.052745][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.060965][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.068129][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.075542][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.084038][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.092449][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.100563][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.113570][ T298] device veth0_vlan entered promiscuous mode [ 27.127589][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.135767][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.144097][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.152466][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.160840][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.169002][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.177090][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.185260][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.193543][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.201748][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.211318][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.218961][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.238312][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.246723][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.258993][ T298] device veth1_macvtap entered promiscuous mode [ 27.271100][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.279034][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.287691][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.302378][ T302] device veth0_vlan entered promiscuous mode [ 27.309368][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.318037][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.326653][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.334571][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.342798][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.351304][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.360024][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.368589][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.386123][ T301] device veth0_vlan entered promiscuous mode [ 27.392528][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.400179][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.408073][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.416086][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.424366][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.432178][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.458613][ T302] device veth1_macvtap entered promiscuous mode [ 27.465690][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.475276][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.485016][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.493537][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.502471][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.510697][ T298] syz-executor (298) used greatest stack depth: 22392 bytes left [ 27.532861][ T301] device veth1_macvtap entered promiscuous mode [ 27.547846][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.556681][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.565085][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.573236][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.582601][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.593602][ T297] device veth0_vlan entered promiscuous mode [ 27.611025][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.626740][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.643711][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.652171][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.670813][ T328] loop0: detected capacity change from 0 to 512 [ 27.688414][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.696023][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.704237][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.713333][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.728160][ T328] loop0: detected capacity change from 0 to 512 [ 27.734863][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.743540][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.761239][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.771876][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.798669][ T297] device veth1_macvtap entered promiscuous mode [ 27.816582][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.824372][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.832922][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.849496][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.858077][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.927253][ T337] loop0: detected capacity change from 0 to 512 [ 27.939349][ T297] syz-executor (297) used greatest stack depth: 22344 bytes left [ 27.960922][ T337] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 27.982984][ T337] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 27.992232][ T337] EXT4-fs (loop0): orphan cleanup on readonly fs [ 27.999118][ T337] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 28.015694][ T337] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 28.023124][ T337] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.9: bg 0: block 15: invalid block bitmap [ 28.036841][ T337] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 28.047731][ T337] EXT4-fs (loop0): 1 truncate cleaned up [ 28.053428][ T337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.099169][ T287] EXT4-fs (loop0): unmounting filesystem. [ 28.508206][ T43] device bridge_slave_1 left promiscuous mode [ 28.514422][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.522502][ T43] device bridge_slave_0 left promiscuous mode [ 28.528783][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.537449][ T43] device bridge_slave_1 left promiscuous mode [ 28.543607][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.552275][ T43] device bridge_slave_0 left promiscuous mode [ 28.558557][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.567231][ T43] device bridge_slave_1 left promiscuous mode [ 28.573401][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.581332][ T43] device bridge_slave_0 left promiscuous mode [ 28.587696][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.596850][ T43] device veth1_macvtap left promiscuous mode [ 28.602923][ T43] device veth0_vlan left promiscuous mode [ 28.609306][ T43] device veth1_macvtap left promiscuous mode [ 28.615488][ T43] device veth0_vlan left promiscuous mode [ 28.621909][ T43] device veth1_macvtap left promiscuous mode [ 28.628189][ T43] device veth0_vlan left promiscuous mode SYZFAIL: mkdir(syz-tmp) failed (errno 30: Read-only file system) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=2 req=3 state=1 status=67 (errno 9: Bad file descriptor) [ 29.947037][ T43] device bridge_slave_1 left promiscuous mode [ 29.953185][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.960842][ T43] device bridge_slave_0 left promiscuous mode [ 29.967064][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.974877][ T43] device bridge_slave_1 left promiscuous mode [ 29.981102][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.988643][ T43] device bridge_slave_0 left promiscuous mode [ 29.994752][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.002922][ T43] device veth1_macvtap left promiscuous mode [ 30.009005][ T43] device veth0_vlan left promiscuous mode [ 30.014930][ T43] device veth1_macvtap left promiscuous mode [ 30.021040][ T43] device veth0_vlan left promiscuous mode [ 31.129465][ T103] EXT4-fs error: 228 callbacks suppressed [ 31.129484][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 31.146775][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 31.158227][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 31.169702][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 31.181128][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 31.192745][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0