program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xaf, &(0x7f0000000380)="$eJzs1zFKA0EABdDvCmprI4KF9TbewaOIpTZipQjeIOQiuUqOsH2KFNuGkAnJbgghqVKkWN4rBv58Bqb908XkaVwn5T8p9ePXrOx9//x+vH12ZxikKsltkrskz/ddnr923VXfN+3fe9NeHz++GV38vwAAwPmqvBzmVekvlv0K3E6Dh12/CTkxBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGah0AAP//ghMolg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x96) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@deltfilter={0x165c, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x161c, 0x2, [@TCA_CGROUP_POLICE={0xc9c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0xac12, 0x1, 0xe, {0xfa, 0x1, 0x1ff, 0x3, 0x3, 0x40d7}, {0xb, 0x0, 0x0, 0x81, 0x5, 0x5}, 0xd, 0x3, 0x35a}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x8, 0x8000, 0x80000001, {0x8, 0x0, 0x1, 0xb, 0x2, 0x6}, {0xf7, 0x0, 0x1a78, 0x3ff, 0x401, 0x4}, 0x6, 0x200, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff001, 0xfffffffb, 0xa6, 0x7, 0xf2f, 0xb0, 0x1a6, 0xd, 0x40, 0xd, 0x4, 0x1, 0x9185, 0x14, 0x7, 0x3e6, 0xf, 0x371, 0x30000, 0x200, 0x5, 0x1, 0x5, 0x2, 0x0, 0x5f, 0x45, 0xff000, 0x7, 0x7fff, 0x8001, 0x0, 0x8e, 0x3ff, 0x60000, 0xfffffffb, 0x4, 0x3, 0x4, 0x80000000, 0x3, 0x9, 0xe2d, 0xf74d, 0x7, 0xc, 0x8, 0x2da7, 0x5, 0x7fffffff, 0x5, 0x1ff, 0x9f, 0x7, 0x4, 0x9, 0x400, 0x2, 0x1ff, 0x3, 0x3, 0xc238, 0x5, 0xb8, 0x5, 0x57d76d03, 0x6, 0x2116, 0x7fffffff, 0xb, 0x2, 0x9, 0x9, 0x2d, 0xe43b, 0x8, 0xa2, 0xb, 0x7, 0x0, 0x4d, 0x3, 0x0, 0xb4, 0x40, 0x4, 0x7f, 0x7, 0x88, 0x10, 0x1, 0xabb2, 0xe0000, 0x9, 0x4, 0x283e, 0x0, 0x8, 0x9, 0x9d15, 0x3, 0x3, 0x4, 0x0, 0x4, 0x1000, 0x5, 0x80000001, 0x0, 0x9, 0x7, 0xeb, 0x0, 0x72d8, 0x4, 0xfffffff8, 0x9, 0x1b6e, 0x8, 0x9, 0xfffffffe, 0x9, 0x8, 0x7, 0x3ff, 0x3, 0xfa21, 0x800, 0xffffffff, 0x1, 0x4, 0x8, 0x7, 0x80, 0x4, 0x36d, 0x9, 0x4, 0x3, 0x6d, 0x1, 0x2, 0x5, 0xfb, 0x8000, 0x9, 0x0, 0x1, 0x80000001, 0x2, 0x1, 0xfffffff4, 0x81d, 0x0, 0x0, 0x9, 0x4, 0x9, 0x3, 0x3da, 0xa77e, 0x4, 0x9, 0x546, 0x3f06, 0x5, 0x5, 0xfffffff9, 0x7, 0x2, 0x6, 0x982, 0x5b2d, 0x0, 0x7fff, 0x8, 0x4004, 0x0, 0x3, 0x6, 0x8c6, 0x1, 0x5, 0x10000, 0xfffffffa, 0x7, 0x0, 0x8, 0x1, 0xbcc, 0x6, 0x9, 0x3, 0x57ae2587, 0x0, 0x0, 0x9, 0xfffffffd, 0x81, 0xc, 0xce47, 0x10c, 0x10, 0x6901, 0x3, 0x2, 0x2, 0x400, 0xfffffcf9, 0x18000, 0xd296, 0x7f, 0x8001, 0x3, 0x6, 0x7, 0x6, 0x9, 0x8, 0x1, 0x7f, 0x3, 0x3, 0xe6, 0x31b, 0x2, 0x5, 0x6, 0x7, 0x6a, 0x8488, 0x5, 0x0, 0x8, 0xa, 0x9, 0xf4, 0x0, 0xf7, 0x8000, 0x10, 0x8, 0x3, 0xffff, 0x8, 0xdb8a, 0xfffffff2, 0x2, 0x9, 0x0, 0xfffffffc, 0x10001, 0x9, 0x1ff, 0xb5, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc663, 0x10000, 0x42, 0x10, 0x5, 0x7, 0xd7ee, 0x100, 0xe2, 0x3, 0x2, 0xf7, 0x3, 0x8, 0x1dc5, 0x54, 0x5, 0x7, 0x0, 0x1, 0x0, 0xc, 0x1, 0x8, 0x9f5, 0x80000000, 0x8, 0xbc, 0xfffffff7, 0x2, 0x80000000, 0x8, 0xffff, 0xdc, 0x9, 0x1, 0x4, 0x2, 0xffff, 0x7f, 0x0, 0x6, 0x1, 0x0, 0x80000000, 0x1, 0x1, 0x101, 0x1, 0xffffffff, 0xfffffff8, 0x6, 0x0, 0x4, 0xffffff7f, 0x2f54f3b4, 0x3, 0x8, 0x9, 0xb, 0xff, 0x5, 0x5, 0x3, 0x40, 0xe, 0x8, 0xfffffffe, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x527, 0x9, 0x7fffffff, 0xfffffffe, 0x7, 0x4bf9, 0x1, 0x3c, 0x1, 0x3, 0x9932, 0x80000000, 0xbe, 0x0, 0x4, 0x7, 0x10001, 0x8, 0xba5, 0x7, 0x400, 0xffffffc0, 0x9, 0x7, 0x2a, 0xfffffffc, 0xfffffffb, 0x655, 0x40, 0x4, 0x4, 0x6, 0x80000001, 0x28000, 0x4, 0x1, 0x3, 0x9, 0x2, 0x8, 0xfffffff9, 0x47f48951, 0xffff, 0x3, 0x587459b4, 0x6, 0x3ff, 0x4, 0x8, 0x9, 0x7, 0xc68, 0x4, 0x2, 0x5, 0x3, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x7fffffff, 0x8, 0x0, 0x4, 0xff, 0x7, 0xa, 0x991000, 0x6, 0x0, 0xa6, 0x3, 0x3, 0x9c48, 0x8, 0x2a, 0x8, 0x2, 0x8, 0x8, 0x8, 0x2, 0x1000, 0xfffffffe, 0x400, 0x200, 0x101, 0x9, 0x2, 0xd, 0x4f, 0x4, 0x4, 0xad, 0x6, 0x2, 0x7, 0x4, 0x1, 0x3, 0x5, 0x58, 0x4, 0x401, 0x6, 0x9, 0x7b, 0xe, 0x45, 0x0, 0x56, 0x1, 0x0, 0x5, 0xe, 0xbff, 0x7, 0x8, 0x7, 0x80000001, 0x3, 0x4, 0x3, 0xf, 0xd, 0x5, 0x9, 0x1, 0x8, 0x9, 0x9, 0x80000000, 0x1, 0x7, 0x4, 0x0, 0x7c89, 0x7, 0xa, 0x7, 0x2, 0x8, 0x9, 0x3, 0x3, 0x8, 0x0, 0x7, 0x6, 0x79, 0x6, 0xc0d0, 0x4a1, 0x1, 0xc, 0x3, 0x6, 0xa, 0x9, 0x7, 0x2, 0x2, 0x7fffffff, 0x800, 0x4, 0x6, 0x7fff, 0xffff0000, 0x10, 0x3e11, 0x4, 0xb1c5, 0x1, 0xff, 0x7fffffff, 0x5, 0x4, 0x4, 0x8aa6, 0xdbe0, 0xfffffff9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x7f4, 0x6, 0x676e4ff4, 0x800, 0x7ff, 0x80, 0x3, 0x7b9d, 0x2, 0x0, 0x1, 0x6fe, 0x51e4, 0x9f47, 0x34000000, 0x7, 0xb, 0x80000001, 0x9, 0x32, 0x7, 0x2, 0x0, 0x7, 0x4, 0x2, 0x2, 0x9, 0xfffffb6f, 0xd00, 0xd, 0x2, 0x7, 0x2d, 0x7b, 0x70, 0x6b6, 0x9, 0x9, 0x5c, 0x9, 0x7, 0x81, 0x44, 0xb, 0x5, 0x40, 0x1, 0x0, 0x10, 0x2, 0xff, 0x400, 0x7ff, 0x100, 0xfffffff9, 0x2, 0x9, 0x80000000, 0x4317, 0x8000, 0x93, 0x9, 0x401, 0xc, 0x8, 0x6, 0x200, 0x7, 0x4000000, 0x6, 0x7, 0x3, 0x9, 0xfffffffb, 0xc9c4, 0x66, 0x80000001, 0x3, 0x7, 0x731e, 0xfffffeff, 0x2, 0x3, 0x9, 0x8, 0x9, 0x4, 0x3, 0x9, 0x40fb, 0xfffffff7, 0x401, 0x6f2, 0xe, 0x3, 0x5, 0x8, 0xbcfe, 0x10, 0x7ff, 0x0, 0x733c, 0xb, 0x4, 0x3ff, 0x4, 0x6, 0x0, 0x1, 0xfffffff8, 0x0, 0x8001, 0x9, 0x9, 0x4733, 0x0, 0x1, 0x6, 0x8c, 0x200, 0x290, 0x80, 0xffffffcf, 0x6, 0x3, 0x9, 0x7f, 0x2, 0x7, 0xe, 0x2, 0x3ff, 0x7, 0xe, 0x5, 0x78, 0x1, 0x3, 0x6, 0x5, 0x2, 0xeee3, 0x7fff, 0x1, 0x2, 0x6, 0x7ff, 0x58, 0x0, 0x3, 0xbe, 0x1, 0x1, 0xfff, 0x5, 0x7, 0x9, 0xf9, 0xa6e, 0x55, 0x4, 0x9, 0x3, 0x40, 0xe2c, 0x35, 0xe35, 0x0, 0xfffffffd, 0x2f3edcb3, 0xa64, 0x3ff, 0x1187, 0x3896, 0xfffffffd, 0x6682ae9f, 0xf3f8, 0x1000, 0x4, 0x4584, 0x100, 0x2, 0x6, 0xfff, 0x4, 0x3, 0x4, 0xcf4d, 0xc0000, 0x80000001, 0x1, 0x9, 0xffff5b72, 0x5, 0x2, 0x0, 0x6, 0x3, 0x6, 0x8, 0x100, 0xb, 0x2, 0xe62, 0x2, 0x6, 0xc294, 0x9, 0x6, 0x6, 0x7f, 0x7, 0x101, 0x3, 0x4, 0x80b3, 0x1f6, 0x0, 0xb6, 0x1, 0x2, 0x1c, 0x9, 0x7fff, 0x8, 0xd, 0x4, 0x8, 0xff, 0x7, 0x6, 0x4, 0x4, 0x3, 0x7fff, 0x1, 0x6babec04, 0xf, 0x3, 0x8, 0x7, 0x44d40bc9, 0x7, 0xfffeffff, 0x1, 0x7, 0xb04, 0x4, 0x4, 0x8, 0x7, 0xd, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}]}, @TCA_CGROUP_EMATCHES={0x15c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xff80}, "0614fe788cdb7c80932ab458cced58760e4a0e750c110c9f8baf591ce5abd49aa6523ab95708beddc00ad54f7ee202063b5e76c198eda2c01a7273e8901b8b345fa24ba607b4a82b0a986decc5149688128584fc85e55d3d7aa42b5144ea3d99743cb77e4a1f89782528c7e6b118a9410217485117d401166b"}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x8001}, {0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x30, 0x1, 0x0, 0x0, {{0xb335, 0x0, 0x40}, "39fa49f75db232bff4d3c1fd0ed2232d323c3ad731d5cc95b99a7b41b206634279"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x400}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xb1, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x72, 0x2}, {0x6, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f6", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x15f4}, {0x401, 0xfffffff9, 0xd4, 0x29530faa}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x503d, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x266, 0x2, 0xd, 0xbe, 0x5, 0x5, 0x1, 0x7, 0x3, 0x6, 0xbe3a, 0x2, 0x5, 0xeb, 0x0, 0x200, 0x9b31, 0xb65, 0x8001, 0x80000000, 0x6, 0x6eb, 0xffffffff, 0x0, 0x80, 0x7, 0x800, 0x5, 0x2, 0xb8, 0x40, 0x9, 0xb, 0x8, 0x1000, 0xfffffff6, 0x99, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0x2, 0xfff, 0x6, 0x0, 0x3, 0xffffff8a, 0x10, 0xffffff01, 0x9, 0x5, 0x0, 0x81, 0xffff, 0x5, 0x5, 0xfff, 0x7, 0x3, 0x200, 0x3, 0x1, 0x7fffffff, 0xc11, 0x400004, 0xd, 0xaca, 0x2, 0x0, 0x6, 0x6, 0x2, 0x2, 0x2, 0x88, 0x6, 0x70, 0xb, 0x4091, 0x5, 0x3, 0x6, 0xe0cd, 0x8, 0x6, 0x6, 0x3, 0xf, 0x4b, 0xb, 0x4, 0x6, 0xfffffffc, 0xfffff2b5, 0x2, 0x4, 0x3, 0xa6e2, 0x5, 0x8, 0xf51, 0x4, 0x1, 0x8, 0x3, 0xfffffffe, 0x6, 0x3, 0x83, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0x9, 0x7, 0xaa, 0x986, 0x9, 0x9, 0x200, 0x74e, 0x1, 0x2, 0x5, 0x2, 0x4, 0x4, 0x10001, 0x4, 0x0, 0x6, 0x5, 0x7, 0x3, 0xff, 0x7f, 0x6, 0xffffcde2, 0x81, 0x7fffffff, 0x0, 0x5, 0x200, 0x51, 0x8, 0x2, 0x7, 0xd45, 0xfffffff8, 0x949d, 0x5, 0xfffffff7, 0x3, 0x64, 0x4, 0x4, 0x0, 0x7ff, 0x5, 0x10001, 0x7f, 0x95, 0x606, 0x10000, 0x9, 0x0, 0x7, 0x5, 0x100, 0x80000001, 0x4, 0x5, 0x4000, 0x7fffffff, 0x0, 0x3, 0xc, 0x6, 0x10, 0x9, 0x2ef, 0x60, 0x7fff, 0x10000, 0x8, 0x7f, 0xff4, 0xfffffff9, 0x2, 0x8, 0x0, 0x9, 0x0, 0x3, 0x1, 0x2, 0x3, 0x7, 0x9, 0xf26, 0x4, 0xd, 0x5, 0x81, 0x9, 0x1ff, 0x6, 0xc59, 0x2, 0xc, 0x990, 0x9207, 0xa, 0x6, 0x5, 0x9, 0xf99b, 0x4, 0x5, 0x81, 0x0, 0x7, 0x9, 0x8, 0x2, 0x1, 0x7b, 0xa5ac, 0x1000, 0x8, 0x1f, 0x4, 0x6, 0xff, 0x4ed6, 0x8, 0x5, 0x8, 0x10, 0x59b, 0x8, 0x800, 0x8, 0x0, 0x3, 0x9, 0x9, 0x5, 0x9, 0xa, 0x1, 0x4, 0x8f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x3, 0x1a, 0xf, 0x200, 0x0, 0x20, 0xd, 0x2, 0x6, 0xf, 0x8, 0xfa358036, 0x9be, 0x3, 0x7fff, 0x7, 0x8001, 0x10, 0x10001, 0x2, 0x7fffffff, 0x5, 0x100, 0x81, 0x80, 0x4, 0x0, 0x5, 0xd, 0x6, 0x1, 0x2, 0x6, 0xfff, 0x7, 0x4ae4, 0x80, 0x2, 0x9, 0x4, 0x80000001, 0x9, 0x200, 0x9, 0xffffffff, 0x2, 0x3ff, 0x1, 0x4, 0x500d, 0x9, 0x9, 0x6e3, 0x6, 0x1, 0x394, 0x7, 0x8, 0x7ff, 0x14, 0x5, 0xa9, 0x10000, 0x2c4, 0xfffffff1, 0x5, 0x43, 0x8, 0x4, 0x6, 0x9, 0x35, 0x2, 0x1, 0x40, 0x9, 0x8, 0x3, 0x0, 0x5, 0x4, 0xa, 0x7, 0x5, 0x10000, 0x3, 0x5, 0x6, 0x100, 0x5, 0x3, 0x3ff, 0x2, 0x5, 0x296, 0x2e, 0xa06f, 0x10000, 0x637d, 0x885, 0x2, 0x8, 0xffff, 0x5, 0xd5, 0x0, 0x3, 0x1, 0x6e, 0x200, 0x0, 0x3, 0x6, 0xffffffff, 0x5, 0x2, 0x5, 0xd4a, 0x5, 0x0, 0x4, 0x4, 0x9, 0x78, 0x7de, 0x8, 0x931, 0x0, 0x2, 0x4, 0xd, 0x29, 0x9cce, 0xd534, 0xe287, 0x0, 0x8000000, 0x6, 0x7, 0x2, 0xa83, 0x4c5f, 0x5, 0x5, 0xffff, 0x2, 0x3, 0x800, 0xfffffff8, 0x475e, 0xfffffc00, 0x0, 0x81, 0x4, 0x0, 0xf, 0xd, 0x6, 0x50e25e01, 0x401, 0x1, 0x101, 0xc9, 0x10000, 0x8, 0x1, 0x8, 0x9, 0xa, 0x0, 0x9, 0x4, 0x5, 0x2, 0x5, 0x1, 0xb, 0x7f, 0x4, 0x1000, 0x6, 0x4, 0xffffffff, 0x8, 0x9e, 0x7fff, 0xffffffff, 0x0, 0xff, 0x2, 0x7, 0x8, 0xec3, 0xfffffff6, 0x8, 0x6, 0xfab, 0x1000, 0x8cab, 0x7fff, 0x7, 0x10, 0x292, 0xc7c7, 0x1, 0x100, 0x6, 0xd7b1, 0xffffffff, 0x9, 0xed, 0x7, 0x4, 0xffff, 0x7, 0xfffffe01, 0x443e, 0x6, 0x4, 0x5, 0x400, 0x7, 0x0, 0x2, 0x5902, 0x44f, 0xa73, 0x2, 0x7, 0x1000, 0x9, 0x7f, 0x3e0, 0x9, 0x2, 0x100, 0x3, 0x3, 0x5, 0xd, 0x9f, 0x4, 0x5, 0x6, 0x0, 0x7f, 0x8, 0x1, 0x7, 0x6, 0x4, 0x6, 0x1, 0xfffffffa, 0x6]}]}]}}]}, 0x165c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0xb, 0x0, @void}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) (async, rerun: 32) r4 = io_uring_setup(0x21d6, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) (async) io_uring_enter(r4, 0x12a, 0xffffffdb, 0x17, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000001ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c80)={0x1c8, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xaf}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}]}}}]}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_SET_EXPRESSIONS={0x118, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x22}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44010}, 0x804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)={0x58, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) r7 = io_uring_setup(0x1916, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1000000002648e8b1792b22ba1dbdf25b728fada62f60cc793006fe386285967685db12b72f696f256730c922e9034548ca04fb1"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) [ 84.010142][ T5290] Bluetooth: hci0: command tx timeout [ 84.108437][ T5328] loop0: detected capacity change from 0 to 64 [ 84.234639][ T5329] ------------[ cut here ]------------ [ 84.237416][ T5329] !buffer_uptodate(bh) [ 84.237426][ T5329] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5329 [ 84.243490][ T5329] Modules linked in: [ 84.245657][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.249463][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.253763][ T5329] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 84.256218][ T5329] Code: 4c 89 f7 e8 79 68 da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 1f 82 6d ff eb 8c e8 18 82 6d ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 0a 82 6d ff 90 0f 0b 90 e9 cf fd ff ff [ 84.264034][ T5329] RSP: 0018:ffffc900035df608 EFLAGS: 00010293 [ 84.266512][ T5329] RAX: ffffffff82584408 RBX: ffff88801f61d000 RCX: ffff888000a14a80 [ 84.269815][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 84.273071][ T5329] RBP: ffff888012758001 R08: ffff88801f61d007 R09: 1ffff11003ec3a00 [ 84.276257][ T5329] R10: dffffc0000000000 R11: ffffed1003ec3a01 R12: ffff8880550d7400 [ 84.279487][ T5329] R13: ffff88801f646570 R14: ffff88801f61d000 R15: 000000000000000a [ 84.282836][ T5329] FS: 00007f42aa8416c0(0000) GS:ffff88808c895000(0000) knlGS:0000000000000000 [ 84.286423][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.289271][ T5329] CR2: 0000200000001000 CR3: 0000000043405000 CR4: 0000000000352ef0 [ 84.292717][ T5329] Call Trace: [ 84.294273][ T5329] [ 84.295538][ T5329] bfs_get_block+0x5da/0xae0 [ 84.297528][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 84.299917][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 84.302178][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 84.304761][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 84.307016][ T5329] block_write_begin+0x8d/0x120 [ 84.309070][ T5329] ? bfs_write_begin+0x1e/0xd0 [ 84.311077][ T5329] bfs_write_begin+0x35/0xd0 [ 84.313112][ T5329] generic_perform_write+0x2e2/0x8f0 [ 84.315393][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 84.317854][ T5329] ? file_update_time_flags+0x219/0x4a0 [ 84.320323][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 84.322975][ T5329] ? generic_file_write_iter+0x136/0x680 [ 84.324921][ T5329] generic_file_write_iter+0x14a/0x680 [ 84.326769][ T5329] ? add_lock_to_list+0xc7/0x100 [ 84.328557][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 84.331159][ T5329] ? lockdep_unlock+0x5d/0xd0 [ 84.333404][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 84.335604][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 84.337663][ T5329] ? vfs_write+0x227/0xb90 [ 84.339605][ T5329] ? vfs_write+0x227/0xb90 [ 84.341731][ T5329] vfs_write+0x61d/0xb90 [ 84.344046][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 84.346666][ T5329] ? __fget_files+0x2a/0x420 [ 84.348834][ T5329] ksys_write+0x150/0x270 [ 84.350671][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 84.352671][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.355083][ T5329] do_syscall_64+0x174/0x580 [ 84.356856][ T5329] ? trace_irq_disable+0x3b/0x140 [ 84.358764][ T5329] ? clear_bhb_loop+0x40/0x90 [ 84.360649][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.363024][ T5329] RIP: 0033:0x7f42a999ce59 [ 84.364741][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.372214][ T5329] RSP: 002b:00007f42aa840fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.375462][ T5329] RAX: ffffffffffffffda RBX: 00007f42a9c16090 RCX: 00007f42a999ce59 [ 84.378544][ T5329] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000005 [ 84.381656][ T5329] RBP: 00007f42a9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 84.384826][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.387964][ T5329] R13: 00007f42a9c16128 R14: 00007f42a9c16090 R15: 00007ffdf5c1c5c8 [ 84.391076][ T5329] [ 84.392433][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.395325][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.398860][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.402982][ T5329] Call Trace: [ 84.404303][ T5329] [ 84.405545][ T5329] vpanic+0x56c/0xa60 [ 84.407236][ T5329] ? __pfx__printk+0x10/0x10 [ 84.409163][ T5329] ? __pfx_vpanic+0x10/0x10 [ 84.411071][ T5329] ? is_bpf_text_address+0x292/0x2b0 [ 84.413280][ T5329] ? is_bpf_text_address+0x26/0x2b0 [ 84.415371][ T5329] panic+0xc5/0xd0 [ 84.416912][ T5329] ? __pfx_panic+0x10/0x10 [ 84.418722][ T5329] __warn+0x315/0x4c0 [ 84.420526][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 84.422648][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 84.424750][ T5329] __report_bug+0x29a/0x540 [ 84.426703][ T5329] ? filemap_get_entry+0xcd/0x3f0 [ 84.428709][ T5329] ? filemap_get_entry+0xcd/0x3f0 [ 84.430787][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 84.432944][ T5329] ? __pfx___report_bug+0x10/0x10 [ 84.435018][ T5329] ? __pfx_folio_mark_accessed+0x10/0x10 [ 84.437402][ T5329] ? __pfx___schedule+0x10/0x10 [ 84.439523][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 84.441628][ T5329] report_bug+0x16a/0x220 [ 84.443368][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 84.445494][ T5329] ? mark_buffer_dirty+0x29b/0x410 [ 84.447607][ T5329] handle_bug+0x9c/0x200 [ 84.449332][ T5329] exc_invalid_op+0x1a/0x50 [ 84.451362][ T5329] asm_exc_invalid_op+0x1a/0x20 [ 84.453373][ T5329] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 84.455708][ T5329] Code: 4c 89 f7 e8 79 68 da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 1f 82 6d ff eb 8c e8 18 82 6d ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 0a 82 6d ff 90 0f 0b 90 e9 cf fd ff ff [ 84.463585][ T5329] RSP: 0018:ffffc900035df608 EFLAGS: 00010293 [ 84.466034][ T5329] RAX: ffffffff82584408 RBX: ffff88801f61d000 RCX: ffff888000a14a80 [ 84.469267][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 84.472508][ T5329] RBP: ffff888012758001 R08: ffff88801f61d007 R09: 1ffff11003ec3a00 [ 84.475771][ T5329] R10: dffffc0000000000 R11: ffffed1003ec3a01 R12: ffff8880550d7400 [ 84.478985][ T5329] R13: ffff88801f646570 R14: ffff88801f61d000 R15: 000000000000000a [ 84.482234][ T5329] ? mark_buffer_dirty+0x298/0x410 [ 84.484340][ T5329] ? mark_buffer_dirty+0x298/0x410 [ 84.486384][ T5329] bfs_get_block+0x5da/0xae0 [ 84.488303][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 84.490589][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 84.492501][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 84.494660][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 84.496560][ T5329] block_write_begin+0x8d/0x120 [ 84.498329][ T5329] ? bfs_write_begin+0x1e/0xd0 [ 84.500084][ T5329] bfs_write_begin+0x35/0xd0 [ 84.501742][ T5329] generic_perform_write+0x2e2/0x8f0 [ 84.503561][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 84.505656][ T5329] ? file_update_time_flags+0x219/0x4a0 [ 84.507720][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 84.509672][ T5329] ? generic_file_write_iter+0x136/0x680 [ 84.512030][ T5329] generic_file_write_iter+0x14a/0x680 [ 84.514226][ T5329] ? add_lock_to_list+0xc7/0x100 [ 84.516213][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 84.518652][ T5329] ? lockdep_unlock+0x5d/0xd0 [ 84.520728][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 84.522891][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 84.525017][ T5329] ? vfs_write+0x227/0xb90 [ 84.526960][ T5329] ? vfs_write+0x227/0xb90 [ 84.528827][ T5329] vfs_write+0x61d/0xb90 [ 84.530546][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 84.532469][ T5329] ? __fget_files+0x2a/0x420 [ 84.534366][ T5329] ksys_write+0x150/0x270 [ 84.536182][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 84.538104][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.540613][ T5329] do_syscall_64+0x174/0x580 [ 84.542516][ T5329] ? trace_irq_disable+0x3b/0x140 [ 84.544523][ T5329] ? clear_bhb_loop+0x40/0x90 [ 84.546532][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.549118][ T5329] RIP: 0033:0x7f42a999ce59 [ 84.551046][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.558961][ T5329] RSP: 002b:00007f42aa840fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.562385][ T5329] RAX: ffffffffffffffda RBX: 00007f42a9c16090 RCX: 00007f42a999ce59 [ 84.565631][ T5329] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000005 [ 84.568873][ T5329] RBP: 00007f42a9a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 84.572329][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.575432][ T5329] R13: 00007f42a9c16128 R14: 00007f42a9c16090 R15: 00007ffdf5c1c5c8 [ 84.578685][ T5329] [ 84.580387][ T5329] Kernel Offset: disabled [ 84.582152][ T5329] Rebooting in 86400 seconds..