fff, 0x0, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 497.768625][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 497.797256][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:49:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 497.851215][T16444] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 497.856986][ T3925] loop1: p2 < > 08:49:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0x49de4d1c41542053}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x40000000400000, 0x0) [ 497.895888][T16444] EXT4-fs (loop2): get root inode failed [ 497.925056][T16444] EXT4-fs (loop2): mount failed 08:49:45 executing program 1: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x83ce, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x3a05, 0xfff, 0x8, 0x4, 0x7, 0x0, 0x6}, 0x0, 0x200005, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x202002) ptrace$setopts(0x6, 0x0, 0x3, 0x42) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x100005) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100101, 0x0, @perf_bp={0x0, 0x2}, 0x4f000, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x33e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') semctl$GETVAL(0x0, 0x2, 0xc, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000500)=""/168, 0xa8}], 0x2, 0x4c00, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r2, 0x63, 0x0) 08:49:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f0000", 0x16, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:45 executing program 4: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='umask=00000000000000000000000,umask=00000000000000000000000,mft_zone_multiplier=0x0000000000000000,show_sys_files=yes,errors']) 08:49:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x10000) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 498.229347][T16472] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 498.243439][T16472] EXT4-fs (loop2): get root inode failed [ 498.249272][T16472] EXT4-fs (loop2): mount failed [ 498.465301][ T28] audit: type=1804 audit(1601369385.994:35): pid=16480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir843079767/syzkaller.P9TxF3/331/file0" dev="sda1" ino=16083 res=1 errno=0 [ 498.555300][ T28] audit: type=1804 audit(1601369386.024:36): pid=16480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir843079767/syzkaller.P9TxF3/331/file0" dev="sda1" ino=16083 res=1 errno=0 [ 498.666765][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 498.676912][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 498.701617][ T3925] loop1: p2 < > [ 498.917085][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 498.942554][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 498.958209][ T3925] loop1: p2 < > 08:49:46 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2c, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 08:49:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) 08:49:46 executing program 1: perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x83ce, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x3a05, 0xfff, 0x8, 0x4, 0x7, 0x0, 0x6}, 0x0, 0x200005, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x202002) ptrace$setopts(0x6, 0x0, 0x3, 0x42) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) personality(0x100005) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100101, 0x0, @perf_bp={0x0, 0x2}, 0x4f000, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x33e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') semctl$GETVAL(0x0, 0x2, 0xc, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000500)=""/168, 0xa8}], 0x2, 0x4c00, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r2, 0x63, 0x0) 08:49:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f0000", 0x16, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 499.062787][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 499.127280][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 499.150968][T16496] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated 08:49:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 499.186681][ T3925] loop1: p2 < > [ 499.222771][T16496] EXT4-fs (loop2): get root inode failed [ 499.242664][T16496] EXT4-fs (loop2): mount failed 08:49:46 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_setup(0x470a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x97}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000600)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:49:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000", 0x1a, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x14, r1, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 08:49:46 executing program 0: futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 08:49:46 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = inotify_init1(0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x700022d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) 08:49:47 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080), 0x39) 08:49:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x14, r1, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 499.602230][T16524] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated 08:49:47 executing program 1: semget(0x0, 0x1, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200, 0xe], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 499.661655][T16524] EXT4-fs (loop2): get root inode failed 08:49:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x4040aea0, &(0x7f0000000000)={0x0, 0x741000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000000000000000000000008000"}}) [ 499.733790][T16524] EXT4-fs (loop2): mount failed 08:49:47 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_setup(0x470a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x97}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000600)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 499.793664][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:49:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000", 0x1a, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 499.867184][T16553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.890002][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 499.910818][ T3925] loop1: p2 < > [ 500.074637][T16563] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 500.102051][T16563] EXT4-fs (loop2): get root inode failed [ 500.113389][T16563] EXT4-fs (loop2): mount failed 08:49:47 executing program 4: r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000000)={0x8, @vbi}) 08:49:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010063616b6500000000100002000c000200376798aff4"], 0x40}}, 0x0) 08:49:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:47 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000007000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000001340)='<', 0x1, 0x0, 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 08:49:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000640)="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", 0x215, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x3d) 08:49:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000", 0x1a, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:47 executing program 0: socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 08:49:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x57, 0x10}, [@call={0x64}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 08:49:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="5500000018007f7d00fe01b2a4a280930a", 0x11}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 500.437407][T16587] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 500.473461][T16587] EXT4-fs (loop2): get root inode failed [ 500.516074][T16587] EXT4-fs (loop2): mount failed 08:49:48 executing program 0: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @empty, @broadcast, @broadcast]}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 08:49:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f0000000000000400", 0x1c, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x80047456, 0x0) 08:49:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x39) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x7d, &(0x7f0000000000)={r3}, 0x8) 08:49:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:48 executing program 1: rt_sigaction(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) [ 500.829523][T16607] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 500.848199][T16607] EXT4-fs (loop2): mount failed 08:49:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f0000000000000400", 0x1c, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 501.130852][T16624] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 501.143544][T16624] EXT4-fs (loop2): mount failed 08:49:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000d40)={[{@sunit={'sunit'}}]}) 08:49:48 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x49) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xfb, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 08:49:48 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1b7}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000005e001f", 0x7) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:49:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f0000000000000400", 0x1c, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 501.228223][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 501.239385][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 501.304129][ T3925] loop1: p2 < > 08:49:48 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4148, 0x0) 08:49:48 executing program 1: getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 501.427338][T16640] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 501.436284][T16640] EXT4-fs (loop2): mount failed 08:49:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 501.609007][T16646] XFS (loop3): Invalid superblock magic number 08:49:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TCSETXW(r0, 0x5406, 0x0) 08:49:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r7}) 08:49:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 501.771072][T16666] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 501.804512][T16666] EXT4-fs (loop2): get root inode failed [ 501.810716][T16666] EXT4-fs (loop2): mount failed 08:49:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_LSEEK(r0, 0x0, 0xfffffffffffffdc7) 08:49:49 executing program 1: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000400)=0xffffffffffffffff, 0x8) [ 501.956734][T16646] XFS (loop3): Invalid superblock magic number 08:49:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000d40)={[{@sunit={'sunit'}}]}) 08:49:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:49 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) 08:49:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x68, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) 08:49:49 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x8000) [ 502.190723][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 502.213680][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 502.234433][ T3925] loop1: p2 < > 08:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @l2tp={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @dev}, @l2={0x2, 0x0, @fixed}}) 08:49:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x1d00002e) [ 502.342800][T16701] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 502.413341][T16701] EXT4-fs (loop2): get root inode failed [ 502.459627][T16701] EXT4-fs (loop2): mount failed [ 502.471769][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:49:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x4603cc5a, 0x12) [ 502.529497][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:49:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 502.578888][ T3925] loop1: p2 < > 08:49:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 08:49:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="4c4ced391180"}, 0x14) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="4c4ce5391180"}, 0x14) [ 502.680614][T16711] XFS (loop3): Invalid superblock magic number [ 502.707458][T16727] EXT4-fs error (device loop2): ext4_fill_super:4709: inode #2: comm syz-executor.2: iget: root inode unallocated [ 502.724649][T16727] EXT4-fs (loop2): get root inode failed [ 502.733615][T16727] EXT4-fs (loop2): mount failed [ 502.810948][ T28] audit: type=1800 audit(1601369390.345:37): pid=16719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16083 res=0 errno=0 08:49:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x23, 0x0, 0x0, @time, {}, {0x0, 0x2}, @raw8={"a357b6b140cbb60000fd985d"}}], 0x1c) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r0 = getpid() write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x4, 0x2, 0x5}, 0x3}}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0xffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)={0x4}) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x29}, 0x10) pipe2(&(0x7f00000000c0), 0x80000) 08:49:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x8) 08:49:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x3f, 0x0, "4ed99149df2ba1c06552d3a10811a3ced37978991bd5697793a4a46f044cc739a9eb8b4c9790657bc637eea5465853cd1a2a55ebb9971cc15a9a368d2173980cb943a0064a4b228dc86b83be3e89a5b2"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "d7fac25e5cddef8cf200197b2e1e08aad3b6d322e41298da3eeeca53b95a9c98099ef5bf2cfa732df9c1c547251cd0d6f0738d685bb92e3b12c88bdde7d5fe6574ccf58562cd6d7f3f91a93c521892b3"}, 0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 08:49:50 executing program 1: r0 = socket(0x1e, 0x5, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x10000}, 0x10) r2 = socket(0x1e, 0x805, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@tipc, 0x80, 0x0}, 0x0) 08:49:50 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x401, 0x4) 08:49:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="8e0ee8679b1b5a309b3368", 0xb}], 0x1) [ 503.217056][T16760] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 503.265629][T16760] EXT4-fs (loop2): group descriptors corrupted! 08:49:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000040)={0x0, 0x40, 0x0, {0x2, @pix_mp}}) [ 503.510448][T16764] IPVS: ftp: loaded support on port[0] = 21 [ 503.658514][T16776] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 08:49:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:51 executing program 1: r0 = openat$vicodec0(0xffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0xc0405619, &(0x7f0000000300)) 08:49:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}}, 0x0) [ 503.722584][T16776] EXT4-fs (loop2): group descriptors corrupted! [ 503.968838][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 504.051459][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 504.082449][ T3925] loop1: p2 < > [ 504.588190][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 504.600196][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 504.607071][ T3925] loop1: p2 < > [ 504.684569][T16807] IPVS: ftp: loaded support on port[0] = 21 [ 504.702584][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 504.715649][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 504.724366][ T3925] loop1: p2 < > 08:49:52 executing program 3: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) readlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000540)=""/4096, 0x1000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 08:49:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:52 executing program 1: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x3}}, 0x24, 0x0) 08:49:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) setresuid(r1, 0x0, 0x0) 08:49:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005540)=[{{&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_retopts={{0x10, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x28}]}}}], 0x10}}], 0x2, 0x0) 08:49:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 504.854384][ T7620] tipc: TX() has been purged, node left! [ 504.855796][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 504.928113][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 504.968221][T16855] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 08:49:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="90000000000000002900000002"], 0x110) [ 504.982077][ T3925] loop1: p2 < > 08:49:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe2c5e16d87cebd96a909d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)='G', 0x1, 0xfffffffffffffffe) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00'}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 08:49:52 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init1(0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0xaa002, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x5001, 0x0) r1 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 08:49:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'macvlan1\x00', @ifru_data=&(0x7f0000000000)="4a0000008c5d99a0abce60ef28a9724a273d40b482f034d188b0a394097bdb66"}) [ 505.058491][T16855] EXT4-fs (loop2): group descriptors corrupted! 08:49:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 08:49:52 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:49:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x540d, 0x0) [ 505.485316][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 505.506847][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 505.510081][T16882] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 505.544558][ T3925] loop1: p2 < > 08:49:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x3c}}, 0x0) 08:49:53 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) [ 505.639166][T16882] EXT4-fs (loop2): group descriptors corrupted! 08:49:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xb3, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="b399692dbaf87d96f8a6f4d0c803fc3d7a94e2212342e37c8bdd6eab", 0x1c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x700000d, 0x13, r0, 0xcc571000) r2 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000080)=""/11) r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x3d, &(0x7f0000000000), 0x20a154cc) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000005200000000a27000ffdb02000000000600080055000800030040000000000000"], 0x24}}, 0x1) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x79, &(0x7f0000000000), 0x8) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x8001, @ipv4={[], [], @remote}, 0x1ea7}, {0xa, 0x4e22, 0x5ec, @mcast2, 0x40}, 0x5ef6, [0x90, 0xae4, 0x401, 0x0, 0x7, 0x3, 0x8]}, 0x5c) [ 505.851429][T16906] __nla_validate_parse: 4 callbacks suppressed [ 505.851473][T16906] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.922860][T16906] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. 08:49:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:53 executing program 4: kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0}], 0x1c0001) 08:49:53 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7, r2}]) [ 506.137365][T16914] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 506.172882][T16914] EXT4-fs (loop2): group descriptors corrupted! [ 506.216188][T16906] team0: Port device veth17 added [ 506.890648][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 506.901650][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 506.921003][ T3925] loop1: p2 < > 08:49:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="8e0e9b679b1b28429b336d", 0x2000000a}], 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x62242, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 08:49:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="db2d6ffda3f9d564fd7a073b6978f45ffa4dabcd56cc0f8c8e26ab95486dd4cc98dc15d5541901f6f4dffb8dd486e4593e96f617d3a5d1d7", 0x38}], 0x1}}], 0x1, 0x0) 08:49:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xb3, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="b399692dbaf87d96f8a6f4d0c803fc3d7a94e2212342e37c8bdd6eab", 0x1c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x700000d, 0x13, r0, 0xcc571000) r2 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000080)=""/11) r3 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x3d, &(0x7f0000000000), 0x20a154cc) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000005200000000a27000ffdb02000000000600080055000800030040000000000000"], 0x24}}, 0x1) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x79, &(0x7f0000000000), 0x8) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x8001, @ipv4={[], [], @remote}, 0x1ea7}, {0xa, 0x4e22, 0x5ec, @mcast2, 0x40}, 0x5ef6, [0x90, 0xae4, 0x401, 0x0, 0x7, 0x3, 0x8]}, 0x5c) 08:49:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) 08:49:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 509.505784][T16944] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 509.524146][T16948] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 08:49:57 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 509.620201][T16944] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. 08:49:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='[\xdbX\xae[\x1a\xa9\xfd\xfe\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x90\x93\x12l\xb6Z\x95\xab\x00{\xe9\xc2Y\xd1c\x81\x9eG\xf9,\xe2\xc6a\x8b\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x8a\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\x95\xd2q#\xc6\xca\x97!*\x886Ka\x13\xf9\x0fSe\x9c.\xf1\xcd\xd7\xdf< K\\\xb7\xa0\xfbf', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b90300060000c00200000000b738000004000035f4c38422a3bc8220"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:49:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 509.622863][T16948] EXT4-fs (loop2): group descriptors corrupted! [ 509.797409][T16944] team0: Port device veth19 added 08:49:57 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x62, 0x16, 0x7, 0x0, 0x2, 0x2c00, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x200, 0x7ff, 0x40, 0x5, 0x8, 0x59, 0x1}, 0x0, 0x0, r0, 0x9) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf5, 0x9}, 0x0, 0x7f6, 0x0, 0x1, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x101, 0x12) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='\x00') openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)={0x3, 0x8, 0x8, 0x1, 0x100, 0xffffffffffffffff, 0x5, [], 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={0xffffffffffffffff, 0xe, 0x1, 0xfffffffe, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) 08:49:57 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001300358600000003130100000731003e", @ANYRES32=r1], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x2, 0x0) 08:49:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 509.895202][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:49:57 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)={r2, 0x0, 0x20}, &(0x7f0000000040)=0x18) [ 510.055391][T16972] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 510.083946][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.168862][T16972] EXT4-fs (loop2): group descriptors corrupted! 08:49:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 08:49:57 executing program 0: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:49:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:57 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000188, 0x40010002, 0x0) 08:49:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x1, 0x0, 0x0, @generic}) 08:49:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 510.609733][T17007] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 510.622585][T17007] EXT4-fs (loop2): group descriptors corrupted! [ 510.850425][T17014] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 510.881912][T17014] EXT4-fs (loop2): group descriptors corrupted! 08:49:58 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40000141, 0x0, 0x0) 08:49:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a0104000000000000000000000000080005400000002d0900010073797a300000000008000a40fcffffff0900020073797a310000000008000f"], 0xc4}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 08:49:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00", 0x10, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:58 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:49:58 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4081, &(0x7f0000000000)=0xff1) 08:49:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 511.356935][T17040] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 511.377333][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 511.404511][T17037] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (61595!=0) [ 511.451138][T17037] EXT4-fs (loop2): group descriptors corrupted! 08:49:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x0) [ 511.501493][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 08:49:59 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) timerfd_gettime(r0, 0x0) [ 511.787757][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 511.817535][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 511.848709][ T3925] loop1: p2 < > 08:49:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x40000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 08:49:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00", 0x10, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:49:59 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'batadv_slave_1\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x60f6}, {}]}}) 08:49:59 executing program 1: syz_emit_ethernet(0x50, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a46a2f", 0x1a, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x1, "a78ce54020000000"}]}}}}}}, 0x0) 08:49:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:49:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:49:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0x14, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x44}}, 0x0) [ 512.073976][T17072] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (61595!=0) [ 512.113189][T17072] EXT4-fs (loop2): group descriptors corrupted! 08:49:59 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) eventfd(0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080), 0x8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x7}, 0x8) r3 = syz_open_procfs(0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x791c000) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f00000003c0)={0x38, 0x0, 0x0, [{0x0, 0x1, 0x9, 0x0, '/dev/bsg\x00'}]}, 0x38) 08:49:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00", 0x10, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:49:59 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x7) 08:49:59 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)="a082bb11b43a") [ 512.423725][T17088] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (61595!=0) 08:50:00 executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000180)='1', 0x1}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000180)='1', 0x1}], 0x2) 08:50:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) [ 512.475646][T17088] EXT4-fs (loop2): group descriptors corrupted! [ 512.567659][T17089] IPVS: ftp: loaded support on port[0] = 21 08:50:00 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x14}, {0x6, 0x0, 0x0, 0x7ffffff9}]}) socket$nl_generic(0x10, 0x3, 0x10) 08:50:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000", 0x18, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:00 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000040)) 08:50:00 executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000180)='1', 0x1}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000180)='1', 0x1}], 0x2) [ 512.961643][T17118] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33325!=0) [ 513.008163][T17118] EXT4-fs (loop2): group descriptors corrupted! 08:50:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffedf, 0x0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12142) [ 513.074961][T17127] QAT: Device 0 not found [ 513.150073][T17132] QAT: Device 0 not found 08:50:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000", 0x18, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 513.226912][T17091] IPVS: ftp: loaded support on port[0] = 21 [ 513.318860][ T7] tipc: TX() has been purged, node left! [ 513.469817][T17158] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33325!=0) [ 513.504055][T17158] EXT4-fs (loop2): group descriptors corrupted! [ 513.590700][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 513.602706][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 513.612554][ T3925] loop1: p2 < > 08:50:03 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) eventfd(0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080), 0x8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x7}, 0x8) r3 = syz_open_procfs(0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x791c000) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f00000003c0)={0x38, 0x0, 0x0, [{0x0, 0x1, 0x9, 0x0, '/dev/bsg\x00'}]}, 0x38) 08:50:03 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0xf, 0x0, 0x7f}) 08:50:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6d65d564c90c200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/88, 0x58}], 0x2}, 0x0) 08:50:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:03 executing program 3: r0 = eventfd(0xdfffffeb) io_setup(0xb, &(0x7f0000000000)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f00000005c0)="0d5d36d9036f0800", 0x8}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r2, 0x0, 0x0, 0xbc5}]) 08:50:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000", 0x18, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 516.480170][T17192] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33325!=0) [ 516.539903][T17192] EXT4-fs (loop2): group descriptors corrupted! 08:50:04 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r2, 0x0, 0x300f00, 0x7) 08:50:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x802c560a, 0x0) [ 516.676563][T17204] IPVS: ftp: loaded support on port[0] = 21 08:50:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:04 executing program 1: r0 = eventfd2(0x0, 0x80801) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) [ 516.955872][T17220] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33325!=0) [ 516.991945][T17220] EXT4-fs (loop2): group descriptors corrupted! 08:50:04 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000180), 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 08:50:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x83c0550b, 0x0) 08:50:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:50:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) [ 517.428468][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 517.449780][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 517.459424][ T3925] loop1: p2 < > [ 517.471643][T17255] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33325!=0) [ 517.481271][T17255] EXT4-fs (loop2): group descriptors corrupted! 08:50:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:05 executing program 3: syz_mount_image$udf(&(0x7f0000000140)='udf\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000011200)="020003002300010076b5f0010001", 0xe, 0x20000}], 0x0, &(0x7f0000000040)) 08:50:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 08:50:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101}, @NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5c}}, 0x0) [ 517.686468][T17276] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33325!=0) [ 517.696839][T17276] EXT4-fs (loop2): group descriptors corrupted! 08:50:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f00", 0x1e, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b04", 0x66, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000200005000000000000000000000000000000000000000401", 0x36, 0x540}], 0x0, &(0x7f0000000180)) 08:50:05 executing program 0: r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x30, &(0x7f0000000c40)={0x0, 0x10, [], [@enc_lim, @generic={0x0, 0x7c, "5a47bfff0d5fbdc3b27f6161714e74ea6c9e1da399433fbd9a0be550a17f4bfdfe4c3cd54766ff14e3c4afa60fcf99d91c404755d7a27b4005f1edd15d6e939330c97627e2f659c6c01419a4826228fa225bf1d4a932c7d328296b30f2f6b33703665996bc9a61cbfc51329791a61dd7a9aaf78c11efd19ea5ddcf9e"}]}, 0x90) [ 517.861954][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 517.921546][T17288] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=0) [ 517.935576][T17283] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 517.956312][T17288] EXT4-fs (loop2): group descriptors corrupted! [ 517.971212][T17283] UDF-fs: Scanning with blocksize 512 failed 08:50:05 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xeb1, 0x0, 0x1f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4000) 08:50:05 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x36c, 0x1c0, 0x17c, 0x17c, 0x0, 0x5, 0x2a4, 0x260, 0x260, 0x2a4, 0x260, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'ipvlan1\x00', 'rose0\x00'}, 0x0, 0x19c, 0x1c0, 0x52020000, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "bc90d499c227369bf88cd99ace2f3a8411606c9a892cfabc42aa58ac82064fd23bb57313b60837d6fc10bcbbcc9d7bfea8d2578cbaf7ed288360506a01b4e2ae531c28abd30af2c1dc39610ff7c1d0cfd94f94fdf842115724f3f9e181184c29c69344d1386b181749c8ac1dcc8ca7731c5d421228ebe87e20b2a6bf51497c8f", 0x60}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x225) 08:50:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x13}, 0x0) [ 518.055045][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 518.091955][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 518.134540][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 518.135453][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 518.149459][ T3925] loop1: p2 < > [ 518.212348][T17283] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 518.245401][T17283] UDF-fs: Scanning with blocksize 1024 failed [ 518.270421][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 518.312526][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 08:50:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f00", 0x1e, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x6, 0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) write(r0, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a640bda75000000", 0x18) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) getpeername$tipc(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) [ 518.364627][T17283] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 518.402897][T17283] UDF-fs: Scanning with blocksize 2048 failed [ 518.421105][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 518.464317][T17283] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 518.503301][T17283] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 518.519670][T17310] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=0) [ 518.571610][T17283] UDF-fs: Scanning with blocksize 4096 failed [ 518.609758][T17310] EXT4-fs (loop2): group descriptors corrupted! [ 518.621643][T17283] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) 08:50:06 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 08:50:06 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)='h', 0x1}) 08:50:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) unlink(&(0x7f0000000000)='./file0/../file0/file0/file0\x00') 08:50:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f00", 0x1e, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x138, 0x17c, 0x17c, 0x138, 0x5, 0x238, 0x260, 0x260, 0x238, 0x260, 0x3, 0x0, {[{{@ipv6={@ipv4, @loopback, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0x118, 0x138, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@limit={{0x3c, 'limit\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) 08:50:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) 08:50:06 executing program 4: r0 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x560) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x108) 08:50:06 executing program 0: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) [ 518.889107][T17334] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=0) [ 518.910156][T17334] EXT4-fs (loop2): group descriptors corrupted! 08:50:06 executing program 1: bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14000, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000240)="4347c870add45b4c266bda6063d156c001c66cea103882d3082cfad975885105420620e569e343223f55607b", 0x2c) dup(r0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0xfffffffffffffffe, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x10, 0xffffffffffffffff, 0xef041000) socket$inet6(0xa, 0x80000, 0x40) 08:50:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c95991607000000000000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 08:50:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e", 0x1f, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0xd, 0x2}]}]}}, &(0x7f0000000240)=""/207, 0x3e, 0xcf, 0x1}, 0x20) 08:50:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 519.496874][T17367] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:07 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4000, @fd=r4, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:50:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x23b, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}}, 0x0) 08:50:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x78, 0x0) 08:50:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) [ 519.577473][T17368] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=46) [ 519.607081][T17368] EXT4-fs (loop2): group descriptors corrupted! 08:50:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e", 0x1f, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:07 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000940)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5416, &(0x7f0000000980)) 08:50:07 executing program 0: setrlimit(0x2, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)="e1", 0x1}, 0x68) [ 519.950003][T17397] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=46) [ 519.980180][T17397] EXT4-fs (loop2): group descriptors corrupted! 08:50:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 08:50:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xfffffffc, 0x4) 08:50:07 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) 08:50:07 executing program 0: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x12, 0x0, &(0x7f00000000c0)) 08:50:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e", 0x1f, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:07 executing program 3: mkdir(&(0x7f0000000480)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=\\']) [ 520.285753][T17414] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26926!=46) [ 520.308342][T17414] EXT4-fs (loop2): group descriptors corrupted! 08:50:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a027f0200ff110000020000000058000b4824ca805f64009400ff0325010ebc000800008020008000f0fffe00e809005300e21e9fb9000010000100060c10000000000002000000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x0) 08:50:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c561a, 0x0) 08:50:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:08 executing program 4: r0 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) fstatfs(r0, &(0x7f0000000280)=""/4096) [ 520.535343][T17427] overlayfs: failed to resolve './file1': -2 08:50:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a027f0200ff110000020000000058000b4824ca805f64009400ff0325010ebc000800008020008000f0fffe00e809005300e21e9fb9000010000100060c10000000000002000000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x0) [ 520.669068][T17434] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 520.709753][T17434] EXT4-fs (loop2): group descriptors corrupted! [ 521.239768][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 521.250996][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 521.260134][ T3925] loop1: p2 < > [ 521.393678][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 521.404012][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 521.411518][ T3925] loop1: p2 < > [ 521.641462][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 521.651686][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 521.659105][ T3925] loop1: p2 < > [ 521.739200][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 521.749348][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 521.756317][ T3925] loop1: p2 < > 08:50:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:10 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000010003b0e80ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000050000000008000a00", @ANYRES32=0x0, @ANYBLOB="ac0012000800010067726500a000020008000700e0000000060011ae4e24000005001600020000000500170000000000050008000000000008000600ace29b841aa680889c260b9b75fafbea7a5b"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 08:50:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getresuid(&(0x7f0000000340), 0x0, 0x0) syz_mount_image$f2fs(0x0, &(0x7f00000004c0)='./bus/file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="8c29ddbb6f288ee4d54becef070151ebd0aaf12b36ee1403ecc22ea6c8e58d9bb53e4a947af4471dd22d5ba5ff0720a979fb45469c2ea435500ca61285502717e5b1e917210530ca603d9cfb4c28a4bae51fa89af38bb61a9b161e47b007bf5029", 0x61, 0x1}], 0x800021, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f626172726965e21b70726a6a71756f74613d2529b12729268a212d0c2c2b5e1d282726402c666f776e65723c", @ANYRESDEC, @ANYBLOB]) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) io_setup(0x8, &(0x7f00000000c0)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540)=[{0x0}], 0x1, 0x0) 08:50:10 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x5, 0x4) 08:50:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x44, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) [ 523.363409][T17479] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname(r2, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d940)={0x1c, r1, 0x3fd, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 08:50:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.419728][T17480] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 523.557367][T17480] EXT4-fs (loop2): group descriptors corrupted! [ 523.599907][T17479] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:11 executing program 0: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80046601, 0x0) 08:50:11 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) [ 523.788639][T17475] hub 9-0:1.0: USB hub found [ 523.799397][T17475] hub 9-0:1.0: 8 ports detected 08:50:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 524.057808][T17516] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 524.084200][T17516] EXT4-fs (loop2): group descriptors corrupted! [ 524.407997][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 524.418819][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 524.426473][ T3925] loop1: p2 < > 08:50:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:13 executing program 1: flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/254, 0xfe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x4480, 0x0, 0x0, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x6960, 0x8402, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) 08:50:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) getresuid(&(0x7f0000000340), 0x0, 0x0) syz_mount_image$f2fs(0x0, &(0x7f00000004c0)='./bus/file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="8c29ddbb6f288ee4d54becef070151ebd0aaf12b36ee1403ecc22ea6c8e58d9bb53e4a947af4471dd22d5ba5ff0720a979fb45469c2ea435500ca61285502717e5b1e917210530ca603d9cfb4c28a4bae51fa89af38bb61a9b161e47b007bf5029", 0x61, 0x1}], 0x800021, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f626172726965e21b70726a6a71756f74613d2529b12729268a212d0c2c2b5e1d282726402c666f776e65723c", @ANYRESDEC, @ANYBLOB]) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) io_setup(0x8, &(0x7f00000000c0)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540)=[{0x0}], 0x1, 0x0) 08:50:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x40045567, 0xb00902) 08:50:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000200)="999b96b5562293b276", 0x9}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) 08:50:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 526.501181][T17552] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 08:50:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000340)={0x0, 0x1ff, 0xa7eb, r1, 0x0, &(0x7f0000000280)={0x9b0972, 0xfffffffe, [], @string=&(0x7f0000000240)=0x3}}) ioctl$TCSBRKP(r4, 0x5425, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000100005072af1f8890000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000030dd3a05000000000000010073616d706c6500002c0002800800050000000000080003000000000018000200000000000000000000000000000000040006000000070000000000fcd4ec365d8644568562ee8b9051d20e922793991496d3c540be2083753fb3fde32967647358ad3cba78c37689d964c280edcedd2927e661f5193778932ab6306f86b69d625210ceced924ff4c8958b9b61b75268ed3b81fae71a67126c56ea4ef519664c55f6569e40c8b6e40b317055014e46a8e6bc97287929d38beef433f45dc5094e2a5f7ba070000000000"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r7}}, 0x20}}, 0x0) 08:50:14 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x103002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000003c0)=0x17642c4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) preadv(r3, &(0x7f0000001540)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/14, 0xe}], 0x2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0xffffc, 0x0) 08:50:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 526.792581][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.841410][T17571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56624 sclass=netlink_route_socket pid=17571 comm=syz-executor.4 [ 527.030633][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) sendmmsg$inet(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001900)={0x0, 0x7f}, 0x8) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000001980)=ANY=[@ANYBLOB="02010109080000000000000000000000030006001000000002000000e00000090000000000000000030005007217440502"], 0x40}}, 0x0) 08:50:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000340)={0x0, 0x1ff, 0xa7eb, r1, 0x0, &(0x7f0000000280)={0x9b0972, 0xfffffffe, [], @string=&(0x7f0000000240)=0x3}}) ioctl$TCSBRKP(r4, 0x5425, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000100005072af1f8890000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000030dd3a05000000000000010073616d706c6500002c0002800800050000000000080003000000000018000200000000000000000000000000000000040006000000070000000000fcd4ec365d8644568562ee8b9051d20e922793991496d3c540be2083753fb3fde32967647358ad3cba78c37689d964c280edcedd2927e661f5193778932ab6306f86b69d625210ceced924ff4c8958b9b61b75268ed3b81fae71a67126c56ea4ef519664c55f6569e40c8b6e40b317055014e46a8e6bc97287929d38beef433f45dc5094e2a5f7ba070000000000"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 527.221164][T17595] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 08:50:14 executing program 1: r0 = socket(0x15, 0x80005, 0x0) sendmsg$unix(r0, &(0x7f0000000a00)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 08:50:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 527.440637][T17632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56624 sclass=netlink_route_socket pid=17632 comm=syz-executor.4 [ 527.472140][T17612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:50:15 executing program 3: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='hfs\x00', 0x0, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 08:50:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:15 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 08:50:15 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) 08:50:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\n'], 0x1, 0x0) msgget(0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@remote}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000000c0)=0xe4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xbc, 0x800) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/36}, 0x2c, 0xfe3d0a02fd1f0745, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x49c, 0x330, 0x330, 0xffffffff, 0x268, 0x330, 0x41c, 0x41c, 0xffffffff, 0x41c, 0x41c, 0x5, &(0x7f0000000180), {[{{@ipv6={@empty, @local, [0x0, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'syzkaller0\x00', 'xfrm0\x00', {}, {0xff}, 0xe2, 0x20, 0x4, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@hl={{0x24, 'hl\x00'}, {0x0, 0x40}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@loopback, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@mh={{0x24, 'mh\x00'}, {"54f1"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @gre_key=0x400, @port=0x4e24}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@ipv6={@remote, @private0, [0xff000000, 0xff, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'hsr0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x29, 0x20, 0x0, 0x24}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1b, @ipv6=@dev={0xfe, 0x80, [], 0x14}, @ipv6=@local, @icmp_id=0x67, @icmp_id=0x64}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4f8) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2010, 0x1000004, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, 0x0, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 08:50:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x40) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)) [ 527.869948][T17673] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 08:50:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2, 0x14, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f00000003c0)='./file0\x00') 08:50:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x24, 0x14, 0x23, 0x0, 0x0, {0x11, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "a05fb8de7a2d761f55"}]}, 0x24}}, 0x0) [ 527.957600][T17678] IPVS: ftp: loaded support on port[0] = 21 08:50:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 528.322943][T17693] overlayfs: failed to resolve './file0': -2 [ 528.330326][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 528.352206][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 528.362214][ T3925] loop1: p2 < > [ 528.382075][T17705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 528.399577][T17703] overlayfs: overlapping lowerdir path [ 528.462250][T17716] IPVS: ftp: loaded support on port[0] = 21 08:50:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x112, 0x7, 0x0, 0x0) 08:50:16 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0xa0) add_key(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="22e4aafd2cef368f8f25bccb096103b3bedb70bca5ecd9ce422e64613eaa9b7cbc4f99972d63041a7da1fe78762aa25f283972f6173d541912b8c3c265f60d0de44e7cfb51631e4b62ec1492de6a2c24df419914b8477ff935a64b531aa0afd243fdbeb57d34331b77bf1bbb4c2c3154567dd58418ffcfbf42783663092aac0c6de347a9ab6d6da56cec892c03230a2df603c7887e7c8c77ede1e6846c56d39a11bc1bc670634a6ab7c88bc2eaea375705fc26e62c0a3e13a377e0eae5df92c9ef5d277ba41ab0f079618c2a852ecae7f078bfc1f4ce344be183f64710c782b7724c53a8294652d9e0", 0xe9, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 08:50:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\n'], 0x1, 0x0) msgget(0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@remote}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000000c0)=0xe4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000ae27bf39a0bb45024277ab0eb7c164d7489ad65bbe5f971aac678d87a2379131db5ba3c0515f9e49ee603119ec772981d97590d3fb2c66c92ddc042a765c550f651c3fcc92f3417ce34750d235a8e222674b93df53598e928d7ea2f7132c4b1257a82c846cf4b504040ec53b0a8d6c2e7c31ca74d54960373c28692809b0e44043843b2ad04d743d88f0d0051d94ebb9e39454c05e135b5f85eca83f2edcd0f9902b5715b4100b148b0179415c481f821cabfb5ff06f7a2dff391e0e55339b93f0f70f9913b1fc859a08aa9f0a4b461c923cf50087a279a26a44bd7d2604a00e181f7f275620166ebf290375965bbc497bee7c1015875405138da51b4dd7a9aedf25ad7686531114ff600e0453442eaedbf6"], 0xbc, 0x800) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/36}, 0x2c, 0xfe3d0a02fd1f0745, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x49c, 0x330, 0x330, 0xffffffff, 0x268, 0x330, 0x41c, 0x41c, 0xffffffff, 0x41c, 0x41c, 0x5, &(0x7f0000000180), {[{{@ipv6={@empty, @local, [0x0, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'syzkaller0\x00', 'xfrm0\x00', {}, {0xff}, 0xe2, 0x20, 0x4, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@hl={{0x24, 'hl\x00'}, {0x0, 0x40}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@loopback, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@mh={{0x24, 'mh\x00'}, {"54f1"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @gre_key=0x400, @port=0x4e24}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@ipv6={@remote, @private0, [0xff000000, 0xff, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'hsr0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x29, 0x20, 0x0, 0x24}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1b, @ipv6=@dev={0xfe, 0x80, [], 0x14}, @ipv6=@local, @icmp_id=0x67, @icmp_id=0x64}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4f8) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2010, 0x1000004, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, 0x0, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 08:50:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\n'], 0x1, 0x0) msgget(0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@remote}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000000c0)=0xe4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000ae27bf39a0bb45024277ab0eb7c164d7489ad65bbe5f971aac678d87a2379131db5ba3c0515f9e49ee603119ec772981d97590d3fb2c66c92ddc042a765c550f651c3fcc92f3417ce34750d235a8e222674b93df53598e928d7ea2f7132c4b1257a82c846cf4b504040ec53b0a8d6c2e7c31ca74d54960373c28692809b0e44043843b2ad04d743d88f0d0051d94ebb9e39454c05e135b5f85eca83f2edcd0f9902b5715b4100b148b0179415c481f821cabfb5ff06f7a2dff391e0e55339b93f0f70f9913b1fc859a08aa9f0a4b461c923cf50087a279a26a44bd7d2604a00e181f7f275620166ebf290375965bbc497bee7c1015875405138da51b4dd7a9aedf25ad7686531114ff600e0453442eaedbf6"], 0xbc, 0x800) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/36}, 0x2c, 0xfe3d0a02fd1f0745, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x49c, 0x330, 0x330, 0xffffffff, 0x268, 0x330, 0x41c, 0x41c, 0xffffffff, 0x41c, 0x41c, 0x5, &(0x7f0000000180), {[{{@ipv6={@empty, @local, [0x0, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'syzkaller0\x00', 'xfrm0\x00', {}, {0xff}, 0xe2, 0x20, 0x4, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@hl={{0x24, 'hl\x00'}, {0x0, 0x40}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@loopback, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@mh={{0x24, 'mh\x00'}, {"54f1"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @gre_key=0x400, @port=0x4e24}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@ipv6={@remote, @private0, [0xff000000, 0xff, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'hsr0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x29, 0x20, 0x0, 0x24}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1b, @ipv6=@dev={0xfe, 0x80, [], 0x14}, @ipv6=@local, @icmp_id=0x67, @icmp_id=0x64}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4f8) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2010, 0x1000004, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, 0x0, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 08:50:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x21, 0x0, &(0x7f0000000100)) [ 528.779091][T17751] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 528.786886][T17744] IPVS: ftp: loaded support on port[0] = 21 08:50:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x9a, 0x0, {}, {0xffffffffffffffff}}) [ 528.923312][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 528.957220][T17761] IPVS: ftp: loaded support on port[0] = 21 [ 528.958291][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:16 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r2, 0x2272, 0x0) [ 529.028137][ T3925] loop1: p2 < > 08:50:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_rxfh_indir={0x39}}) 08:50:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x10, 0x2b, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[@srh={0x0, 0x0, 0x2}], @echo_reply}}}}}, 0x0) [ 529.329696][T17794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 529.583558][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 529.624950][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 529.642830][ T3925] loop1: p2 < > 08:50:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x2c}}, 0x0) 08:50:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(0x0, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 08:50:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:17 executing program 1: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000005000)={{}, {0x0, 0x1c9c380}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2001}) epoll_pwait(r0, &(0x7f0000a1efac)=[{}], 0x1, 0x0, 0x0, 0x0) 08:50:17 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0x101}, 0x10) sendmmsg(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@tipc, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @broadcast}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x29, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff}, {0xf, 0xa}}}, 0x24}}, 0x0) 08:50:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x0) [ 529.770456][T17835] IPVS: Unknown mcast interface: 08:50:17 executing program 1: mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)='trans=tcp,') [ 529.810908][T17837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:50:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0xfdfdffff, 0x1000000, 0x0}) [ 529.869438][T17840] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 529.932299][T17843] IPVS: Unknown mcast interface: [ 530.023208][T17861] binder: 17858:17861 ioctl c0306201 20000040 returned -11 08:50:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:50:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x104000, 0xa, 0x4002012, r0, 0x0) 08:50:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb689620900c07f801700000000593f77d7471676de20885532318ad608231b088784bacb299b79aaf8aa933cb97a557a3747c9d7ea8f086d6758e38b47a07f7dd31dc3e70772b589e7c6a8394f8370e0dfcbac491cab9a445b9e786bc74a4088f49eb7f5ad8332af06e351e71371f10a6154875d3ab6a9d6a2c9bf586668b7c33aac68df2ea5db828d4011747e7fd0a05dee9d3c442c6cafd5e5c8f3e5f5ba434140455002533525f7af292646fe293677b0afba585b55693d6709cc91f95f4532fa69a493252585b2a0cf4285887102f055ba9e26632ceb16bc9587af18c51be8a9c67374e538fd9b38ef3a6118c48db9424966ead427ccabfdbcdfc7c00000a99cfdff272cbdb228aff3f901f13397e6857522eb92236f132285f244e521bd029117c462f7e73a66d600031173f5e3da33eda7c7e6fc44deade3b3b8b206331c25ae9eccdf02eaacd3d206984f84c4ff79db00636a31d316e25a4b62c07d180c0d84946c75355e30f80fceb8410e659460977b6c7696bcdab6fb093e5bf88f318ca688ed44a51c498bfb6a6463883002825f83b9785d0e813e6fa8950ece8bfec1a80c7652bb07c19daed05c61334a6687c85195a420d0799e799f46a6c1f57c436a916ccc65f38a44e0482de6"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 08:50:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r0, &(0x7f0000000240)="240000001a005f3814f9f4070009040180000000000001000000000008001edc0b5a0040", 0x24) [ 530.147390][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 530.201528][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 530.242053][ T3925] loop1: p2 < > [ 530.381687][T17881] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 08:50:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 08:50:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x101, 0x46) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100677470002400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300007225"], 0x58}}, 0x0) 08:50:18 executing program 0: r0 = openat$ashmem(0xffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40047705, 0x0) 08:50:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext, 0x8000000200052203, 0x40000000800007f, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:50:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 530.551973][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.607607][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.634702][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:50:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 530.655578][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:50:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = dup(r0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 08:50:18 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) [ 530.715676][T17896] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 08:50:18 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000040), 0xfdde) 08:50:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 530.889526][T17907] BTRFS: device fsid 66c03aa3-494b-4953-a5c9-afb0a87c4453 devid 32088147345014784 transid 7 /dev/loop3 scanned by syz-executor.3 (17907) 08:50:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 530.961914][T17907] BTRFS error (device loop3): unsupported checksum algorithm: 256 [ 531.052788][T17907] BTRFS error (device loop3): open_ctree failed [ 531.188046][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 531.202576][T17907] BTRFS error (device loop3): unsupported checksum algorithm: 256 [ 531.227919][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 531.239061][T17907] BTRFS error (device loop3): open_ctree failed [ 531.246131][T17924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 531.284622][ T3925] loop1: p2 < > 08:50:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 08:50:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200012008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 08:50:18 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000002200)=[{0x0, 0x0, 0xfffffffd}, {&(0x7f0000001200)="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", 0x1dc, 0x5}]) 08:50:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:18 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) [ 531.469753][T17938] EXT4-fs (loop0): inodes count not valid: 1179680 vs 32 08:50:19 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)) 08:50:19 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 531.589278][T17938] EXT4-fs (loop0): inodes count not valid: 1179680 vs 32 [ 531.599247][T17946] BTRFS error (device loop3): unsupported checksum algorithm: 256 08:50:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000801925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffe7ee0000000000000000020000000000", 0x58}], 0x1) [ 531.651843][T17949] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 531.684174][T17946] BTRFS error (device loop3): open_ctree failed 08:50:19 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 08:50:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:19 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) [ 532.022181][T17973] BTRFS error (device loop3): unsupported checksum algorithm: 256 [ 532.052392][T17975] EXT4-fs (loop2): unsupported descriptor size 0 [ 532.077820][T17973] BTRFS error (device loop3): open_ctree failed 08:50:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000214a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x52) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 08:50:19 executing program 0: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0xff, 0x4, 0x6) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = accept4$netrom(r2, &(0x7f0000000340)={{0x3, @null}, [@remote, @bcast, @remote, @remote, @bcast, @null, @null]}, &(0x7f0000000080)=0x48, 0x800) flock(r3, 0x2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000140)={0xfffffff8, 0x22c}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000020010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffffff9}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x54}}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) 08:50:19 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)) 08:50:19 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 08:50:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:19 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) [ 532.317854][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 532.365458][T17987] EXT4-fs (loop2): unsupported descriptor size 0 08:50:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x21, 0x0, &(0x7f0000000240)) [ 532.482364][T18001] BTRFS error (device loop3): unsupported checksum algorithm: 256 08:50:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 532.532376][T18001] BTRFS error (device loop3): open_ctree failed 08:50:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800810de01180ecdb4cb9040a5a0aef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600050003ac041000d65f6f94007134cf6efb8000a007a290457f0189b316277ce01f00ce8017cbec4c2ee5a7cef4090000001fb791643ad9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025cccaa4000000b798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d930e8a452a92307f27260e000000000000", 0x2b8}], 0x1}, 0x0) 08:50:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001380)={0x14, 0x1e, 0x201, 0x0, 0x0, "", [@generic="e7"]}, 0x14}], 0x1}, 0x0) [ 532.722407][T18014] EXT4-fs (loop2): unsupported descriptor size 0 08:50:20 executing program 3: syz_mount_image$btrfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:20 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100)={[{@fat=@time_offset={'time_offset'}}]}) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) [ 532.775510][T18016] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 532.805192][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 532.872777][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800810de01180ecdb4cb9040a5a0aef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600050003ac041000d65f6f94007134cf6efb8000a007a290457f0189b316277ce01f00ce8017cbec4c2ee5a7cef4090000001fb791643ad9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025cccaa4000000b798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d930e8a452a92307f27260e000000000000", 0x2b8}], 0x1}, 0x0) 08:50:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 532.914296][ T3925] loop1: p2 < > 08:50:20 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) close(r0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 533.002318][T18036] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 533.019527][T18025] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:50:20 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4b, 0x0, 0x0) [ 533.053798][T18034] EXT4-fs (loop2): unsupported descriptor size 0 08:50:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:50:20 executing program 3: syz_mount_image$btrfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r3, r5) 08:50:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:20 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) 08:50:20 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, r0, 0x427, 0x0, 0x0, {0x18}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x0) 08:50:20 executing program 1: r0 = fanotify_init(0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@remote, 0x48, r6}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000020c0)={r9}, &(0x7f0000002180)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r9, 0x1, 0x20}, 0xc) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r0}}) [ 533.319346][ T28] audit: type=1400 audit(1601369420.850:38): avc: denied { create } for pid=18051 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_notify_exec_t:s0 tclass=udp_socket permissive=1 08:50:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:50:21 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) 08:50:21 executing program 3: syz_mount_image$btrfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) [ 533.411691][ T28] audit: type=1400 audit(1601369420.890:39): avc: denied { connect } for pid=18051 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_notify_exec_t:s0 tclass=udp_socket permissive=1 [ 533.436153][T18057] EXT4-fs (loop2): unsupported descriptor size 0 08:50:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 533.547586][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff18e2090000000000000200000000010051"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x91f, 0x0, "844323cd7b0a597e3382e05295d10ce5ed9cd2"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) 08:50:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x4041, 0x0, 0x0) 08:50:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 533.590497][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 533.627686][ T3925] loop1: p2 < > 08:50:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:50:21 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff18e2090000000000000200000000010051"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x91f, 0x0, "844323cd7b0a597e3382e05295d10ce5ed9cd2"}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) [ 533.740446][T18084] EXT4-fs (loop2): unsupported descriptor size 0 08:50:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 534.016561][T18101] EXT4-fs (loop2): unsupported descriptor size 0 [ 534.087508][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 534.097765][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 534.107578][ T3925] loop1: p2 < > 08:50:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x59) 08:50:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000050a1d0200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800024040ff94a6090003"], 0xd0}}, 0x0) 08:50:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20000010}}, 0x0) 08:50:21 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:21 executing program 0: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:50:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)='H', 0x1}], 0x1}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 534.482010][T18121] EXT4-fs (loop2): unsupported descriptor size 0 08:50:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) dup2(r1, r0) 08:50:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 534.641900][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 534.652930][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 534.670840][ T3925] loop1: p2 < > 08:50:22 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) recvfrom$netrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{0x3, @bcast}, [@default, @bcast, @bcast, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 08:50:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'veth1_virt_wifi\x00'}) 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:50:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)) 08:50:22 executing program 5: r0 = getpgid(0x0) ioprio_set$pid(0x2, r0, 0x4004) [ 534.858118][T18156] EXT4-fs (loop2): unsupported descriptor size 0 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:50:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:22 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xfc, &(0x7f0000000040), &(0x7f0000000000)=0x4) 08:50:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x4, 0x1}]}}]}]}, 0x34}}, 0x0) 08:50:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)) 08:50:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="480000001400e702095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff", 0x34}, {&(0x7f0000000300)="d4bd302b212364bb77de3a9124394a4f67646a66", 0x14}], 0x2}, 0x0) 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x0, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 535.126321][T18173] EXT4-fs (loop2): unsupported descriptor size 0 08:50:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)) 08:50:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:22 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) poll(&(0x7f0000000000)=[{r1}, {r0}], 0x2, 0x1) [ 535.187261][T18177] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:50:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 08:50:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x0, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:22 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 08:50:22 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000e80)) [ 535.381784][T18190] EXT4-fs (loop2): unsupported descriptor size 0 08:50:23 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) poll(&(0x7f0000000000)=[{r1}, {r0}], 0x2, 0x1) [ 535.452159][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:50:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x0, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 535.589934][T18208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 535.619742][T18214] EXT4-fs (loop2): unsupported descriptor size 0 08:50:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:23 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000e80)) 08:50:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001840)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7fffefff) 08:50:23 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) poll(&(0x7f0000000000)=[{r1}, {r0}], 0x2, 0x1) 08:50:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:23 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) poll(&(0x7f0000000000)=[{r1}, {r0}], 0x2, 0x1) 08:50:23 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000e80)) [ 535.948238][T18231] EXT4-fs (loop2): unsupported descriptor size 0 [ 536.105938][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 536.161531][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 536.191844][ T3925] loop1: p2 < > [ 536.469018][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 536.484084][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 536.490830][ T3925] loop1: p2 < > [ 536.585048][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 536.599650][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 536.606766][ T3925] loop1: p2 < > 08:50:24 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 08:50:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:24 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast2}], 0x1c) 08:50:24 executing program 1: userfaultfd(0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 536.775305][T18263] EXT4-fs (loop2): unsupported descriptor size 0 08:50:24 executing program 1: userfaultfd(0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:24 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:24 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(r0) sendfile(r0, r2, 0x0, 0x80006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 537.163414][T18285] EXT4-fs (loop2): unsupported descriptor size 0 [ 537.265562][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 537.322366][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 537.348717][ T3925] loop1: p2 < > 08:50:25 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x62}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/kcm\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x6000000, 0x0) 08:50:25 executing program 1: userfaultfd(0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:25 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x0, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(r0) sendfile(r0, r2, 0x0, 0x80006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 08:50:25 executing program 1: userfaultfd(0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x0, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 537.694607][T18302] EXT4-fs (loop2): unsupported descriptor size 0 08:50:25 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540), 0x0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDGKBLED(r1, 0x4bfa, &(0x7f00000000c0)) 08:50:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x0, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:25 executing program 1: userfaultfd(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:25 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540), 0x0, 0x10000}], 0x0, &(0x7f0000000e80)) [ 538.192329][T18327] EXT4-fs (loop2): unsupported descriptor size 0 08:50:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendfile(r1, r0, 0x0, 0x1c01) 08:50:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 538.532298][T18346] EXT4-fs (loop2): unsupported descriptor size 0 08:50:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 08:50:26 executing program 1: userfaultfd(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:26 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540), 0x0, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c0100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 538.615027][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 538.643592][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 538.674647][ T3925] loop1: p2 < > 08:50:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:26 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d0700000000000000000050000000000000101000"/104, 0x68, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:26 executing program 1: userfaultfd(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) [ 538.809032][T18362] EXT4-fs (loop2): unsupported descriptor size 0 08:50:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 538.950886][T18374] BTRFS: device fsid 66c03aa3-494b-4953-a5c9-afb0a87c4453 devid 0 transid 7 /dev/loop3 scanned by syz-executor.3 (18374) [ 539.059885][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 539.080278][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 539.092778][ T3925] loop1: p2 < > [ 539.174559][T18367] IPVS: ftp: loaded support on port[0] = 21 [ 539.267578][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 539.286814][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 539.301624][ T3925] loop1: p2 < > 08:50:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) 08:50:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c0100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 539.564982][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 539.608424][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 539.631365][ T3925] loop1: p2 < > [ 539.647732][T18397] EXT4-fs (loop2): unsupported descriptor size 0 [ 539.752390][T18403] IPVS: ftp: loaded support on port[0] = 21 [ 539.857709][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 539.869820][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 539.877760][ T3925] loop1: p2 < > 08:50:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 08:50:27 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d0700000000000000000050000000000000101000"/104, 0x68, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:27 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:27 executing program 0: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002bc0)=[{&(0x7f0000000a00)=""/221, 0xdd}], 0x1, 0x0, 0x4) 08:50:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c0100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 540.078800][ T7620] tipc: TX() has been purged, node left! 08:50:27 executing program 0: mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 08:50:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 540.217607][T18456] EXT4-fs (loop2): unsupported descriptor size 0 08:50:27 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:27 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d0700000000000000000050000000000000101000"/104, 0x68, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:28 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) [ 540.579478][T18474] EXT4-fs (loop2): unsupported descriptor size 0 [ 540.604462][T18460] IPVS: ftp: loaded support on port[0] = 21 08:50:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)=0x5b) 08:50:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1, 0x0, 0xffffffff}, 0x8) 08:50:28 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000", 0x9c, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:50:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:28 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:50:29 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000", 0x9c, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:29 executing program 0: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/136, 0x88}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) [ 541.630050][T18516] EXT4-fs (loop2): unsupported descriptor size 0 08:50:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 08:50:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:29 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) [ 541.863752][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 541.921659][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 541.966423][ T3925] loop1: p2 < > 08:50:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 08:50:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000", 0x9c, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}]}]}]}]}, 0x48}}, 0x0) 08:50:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x18, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) [ 542.099312][T18543] EXT4-fs (loop2): unsupported descriptor size 0 08:50:29 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:29 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$lock(r0, 0xd, &(0x7f0000000000)={0x0, 0x1, 0xf5000000, 0x7fffffff, 0xffffffffffffffff}) 08:50:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 542.269578][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 542.293080][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 542.307747][ T3925] loop1: p2 < > 08:50:29 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400"/182, 0xb6, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:29 executing program 0: syz_mount_image$hfs(&(0x7f0000000800)='hfs\x00', &(0x7f0000000840)='./bus\x00', 0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001940)={[{@type={'type', 0x3d, "3554bb71"}}]}) 08:50:30 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 542.508152][T18567] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:30 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140023000000000031dbe924825e9ee30800000000ff", 0x1f, 0x1c0}]) 08:50:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 542.629077][T18574] hfs: can't find a HFS filesystem on dev loop0 08:50:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 542.723964][T18574] hfs: can't find a HFS filesystem on dev loop0 08:50:30 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:30 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400"/182, 0xb6, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:30 executing program 0: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)={[{@allocsize={'allocsize', 0x3d, [0x67]}}]}) [ 542.902750][T18584] Dev loop5: unable to read RDB block 1 [ 542.924744][T18584] loop5: unable to read partition table [ 542.990693][T18584] loop5: partition table beyond EOD, truncated 08:50:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 543.043494][T18591] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 543.050258][T18584] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 08:50:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:30 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:30 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400"/182, 0xb6, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 543.313354][T18584] Dev loop5: unable to read RDB block 1 [ 543.321661][T18584] loop5: unable to read partition table [ 543.361409][T18584] loop5: partition table beyond EOD, truncated [ 543.391402][T18584] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 08:50:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 543.514042][T18613] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 543.524876][ T3925] Dev loop5: unable to read RDB block 1 [ 543.549377][ T3925] loop5: unable to read partition table 08:50:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r2, @ANYBLOB="08000a00c64f4ba7c956ae935998acaed6de8f6f3e1ea6f1907f0000000000000037aeba9082a69bc75d7a3912339e96a01f5aa7929395003f20017069ebf1b5ebe5a27fb578a52078c1eed0f300000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000000c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = userfaultfd(0x800) ioctl$BLKROSET(r4, 0x125d, &(0x7f00000001c0)=0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000c34000)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) socket$nl_generic(0x10, 0x3, 0x10) 08:50:31 executing program 0: r0 = socket(0x10, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 08:50:31 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 543.578234][ T3925] loop5: partition table beyond EOD, truncated 08:50:31 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400000000000000000000000000000000000000000000004501000000000000020000", 0xc3, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:31 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 08:50:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 08:50:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f00000003c0)=0x8) lseek(r3, 0x1000000, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 543.833917][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 08:50:31 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400000000000000000000000000000000000000000000004501000000000000020000", 0xc3, 0x10000}], 0x0, &(0x7f0000000e80)) [ 543.935088][T18644] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 08:50:31 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) [ 544.343273][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 08:50:32 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 08:50:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:32 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400000000000000000000000000000000000000000000004501000000000000020000", 0xc3, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000000, 0x6d}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 08:50:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) 08:50:32 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) close(r1) 08:50:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) [ 544.631853][T18679] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:32 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000", 0xca, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000010c0)=0x19ff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg0\x00', 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/autofs\x00', 0x0, 0x0) ioctl(r2, 0x800000000000937e, &(0x7f00000002c0)) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xf4) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40002141) 08:50:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, 0x0, 0x0) [ 545.132917][T18699] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:32 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000", 0xca, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:32 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002040)={{0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}) 08:50:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 545.283670][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 545.329568][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 545.387246][ T3925] loop1: p2 < > 08:50:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000010c0)=0x19ff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg0\x00', 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/autofs\x00', 0x0, 0x0) ioctl(r2, 0x800000000000937e, &(0x7f00000002c0)) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xf4) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40002141) 08:50:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) [ 545.539592][T18724] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:33 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000", 0xca, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x560e, &(0x7f0000000000)) 08:50:33 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 08:50:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:33 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000b5c000/0x1000)=nil, 0x2) 08:50:33 executing program 4: set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="95ada8dd33"], 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="549b8012", 0x10004}], 0x1}}, {{0x0, 0xfffffcd1, 0x0}}], 0x40000ac, 0x0) 08:50:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:33 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000", 0xcd, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:33 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 545.886913][T18743] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:33 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) 08:50:33 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:33 executing program 1: sigaltstack(&(0x7f00006d4000/0x800000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) wait4(0x0, 0x0, 0x0, 0x0) 08:50:33 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000", 0xcd, 0x10000}], 0x0, &(0x7f0000000e80)) [ 546.247856][T18764] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x14, &(0x7f0000000140)={r1}, 0x8) 08:50:33 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) [ 546.343648][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 546.395659][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 546.422366][ T3925] loop1: p2 < > [ 546.589110][T18790] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 546.607871][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 546.618716][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 546.627137][ T3925] loop1: p2 < > 08:50:34 executing program 4: r0 = socket(0xa, 0x3, 0x3) sendmsg$nfc_llcp(r0, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "3f1f6045a7d5030000005f7a7c32e49e976e809b1f07969fed59000000cd1d09122c49f5041a999df256d374eead753edac76dcd735d42f92c29f1ce276cd8"}, 0x58, 0x0}, 0x0) 08:50:34 executing program 1: r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) sendmsg$AUDIT_USER(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 08:50:34 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:34 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000", 0xcd, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 546.785577][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 546.820682][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:34 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5433, 0x0) [ 546.857454][ T3925] loop1: p2 < > [ 546.864553][T18806] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:34 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400000000000000000000000000000000000000000000004501000000000000020000000001000000000000000000", 0xcf, 0x10000}], 0x0, &(0x7f0000000e80)) [ 547.108940][T18819] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 547.167969][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 547.190102][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 547.199109][ T3925] loop1: p2 < > 08:50:34 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0xd6d0c418f59fe7d3, 0x0) 08:50:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1e, 0x0, &(0x7f00000002c0)) 08:50:34 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:50:34 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:34 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400000000000000000000000000000000000000000000004501000000000000020000000001000000000000000000", 0xcf, 0x10000}], 0x0, &(0x7f0000000e80)) 08:50:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000180)=""/246) socketpair(0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x4004743c, 0x0) 08:50:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x103a02, 0x0) read(r0, 0x0, 0x0) [ 547.390572][T18837] EXT4-fs (loop2): invalid first ino: 0 08:50:35 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 08:50:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 547.553819][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 547.591876][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:35 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d000000000000006000000000000000100000000000000001000000010000000100000610000000400000000000000000000000000000000000000000000004501000000000000020000000001000000000000000000", 0xcf, 0x10000}], 0x0, &(0x7f0000000e80)) [ 547.616294][ T3925] loop1: p2 < > [ 547.653788][T18858] syz-executor.1 (18858) used obsolete PPPIOCDETACH ioctl [ 547.670551][T18857] EXT4-fs (loop2): invalid first ino: 0 08:50:35 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@broadcast, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x180}}, 0x0) 08:50:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 08:50:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:35 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0}], 0x0, &(0x7f0000000e80)) 08:50:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 08:50:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 548.032005][T18880] EXT4-fs (loop2): invalid first ino: 0 [ 548.313379][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 548.331693][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 548.338566][ T3925] loop1: p2 < > [ 548.395816][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 548.418664][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 548.435738][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 548.515532][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 548.527804][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 548.538503][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 548.540649][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 548.548384][ T3925] loop1: p2 < > [ 548.565148][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready [ 548.582514][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp3: link becomes ready [ 548.603873][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp4: link becomes ready [ 548.621909][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp5: link becomes ready [ 548.629238][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp6: link becomes ready [ 548.651908][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp7: link becomes ready [ 548.659371][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp8: link becomes ready [ 548.668101][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp9: link becomes ready [ 548.676141][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp10: link becomes ready [ 548.684495][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp11: link becomes ready [ 548.692549][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp12: link becomes ready [ 548.699943][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp13: link becomes ready [ 548.709537][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp14: link becomes ready [ 548.719062][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp15: link becomes ready [ 548.727670][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp16: link becomes ready [ 548.728092][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 548.736763][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp17: link becomes ready [ 548.753859][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 548.760622][ T3925] loop1: p2 < > [ 548.765712][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp18: link becomes ready [ 548.774949][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp19: link becomes ready [ 548.783309][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp20: link becomes ready [ 548.790994][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp21: link becomes ready [ 548.800412][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp22: link becomes ready [ 548.808580][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp23: link becomes ready [ 548.818664][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp24: link becomes ready [ 548.828036][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp25: link becomes ready [ 548.836439][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp26: link becomes ready [ 548.845008][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp27: link becomes ready [ 548.853344][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp28: link becomes ready [ 548.860829][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp29: link becomes ready [ 548.869751][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp30: link becomes ready [ 548.878122][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp31: link becomes ready [ 548.886604][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp32: link becomes ready [ 548.899616][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp33: link becomes ready [ 548.909550][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp34: link becomes ready [ 548.920224][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp35: link becomes ready [ 548.928914][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp36: link becomes ready [ 548.938399][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp37: link becomes ready [ 548.947325][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp38: link becomes ready [ 548.955721][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp39: link becomes ready [ 548.964094][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp40: link becomes ready [ 548.984354][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp41: link becomes ready [ 549.007003][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp42: link becomes ready [ 549.038593][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp43: link becomes ready [ 549.068904][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp44: link becomes ready [ 549.091886][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp45: link becomes ready [ 549.099354][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp46: link becomes ready [ 549.123099][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp47: link becomes ready [ 549.139719][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp48: link becomes ready [ 549.149184][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp49: link becomes ready [ 549.158768][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp50: link becomes ready [ 549.168431][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp51: link becomes ready [ 549.178061][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp52: link becomes ready [ 549.188106][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp53: link becomes ready [ 549.197122][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp54: link becomes ready [ 549.205852][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp55: link becomes ready [ 549.214730][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp56: link becomes ready [ 549.223514][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp57: link becomes ready [ 549.239935][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp58: link becomes ready [ 549.251129][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp59: link becomes ready [ 549.266084][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp60: link becomes ready [ 549.279949][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp61: link becomes ready [ 549.295761][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp62: link becomes ready [ 549.309940][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp63: link becomes ready [ 549.320322][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp67: link becomes ready [ 549.331033][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp68: link becomes ready [ 549.339857][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp69: link becomes ready [ 549.350098][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp70: link becomes ready [ 549.359084][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp71: link becomes ready [ 549.369198][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp72: link becomes ready [ 549.387369][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp73: link becomes ready [ 549.405160][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp74: link becomes ready [ 549.418063][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp75: link becomes ready [ 549.428082][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp76: link becomes ready [ 549.441413][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp77: link becomes ready [ 549.507890][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp78: link becomes ready [ 549.534863][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp79: link becomes ready [ 549.552871][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp80: link becomes ready [ 549.560286][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp81: link becomes ready [ 549.591910][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp82: link becomes ready [ 549.599302][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp83: link becomes ready [ 549.621828][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp84: link becomes ready [ 549.629165][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp85: link becomes ready [ 549.651737][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp86: link becomes ready [ 549.659060][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp87: link becomes ready [ 549.677452][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp88: link becomes ready [ 549.695180][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp89: link becomes ready [ 549.709827][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp90: link becomes ready [ 549.726342][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp91: link becomes ready [ 549.746736][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp92: link becomes ready [ 549.755938][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp93: link becomes ready [ 549.764771][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp94: link becomes ready [ 549.773516][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp95: link becomes ready [ 549.781121][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp96: link becomes ready [ 549.791066][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp97: link becomes ready [ 549.808173][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp98: link becomes ready [ 549.819961][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp99: link becomes ready [ 549.834942][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp100: link becomes ready [ 549.887067][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp101: link becomes ready [ 549.923226][T18885] IPv6: ADDRCONF(NETDEV_CHANGE): gtp102: link becomes ready 08:50:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x29, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 08:50:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 08:50:37 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0}], 0x0, &(0x7f0000000e80)) 08:50:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x0, 0x25, "62fd2768ba86d4d8d432ac5acb00001d00000800fce9bd2b71ee680f0effe83d4fd2ef923c70d118be570000003b80048537586dac66017cc8ec92168fdb71916e3711aa7728fa929bc16de8474f6af7e3694b06149b13d41a8c731e4b1e7c99ab80ca65544bc66735404a9f64382bce359eab5e6323d24369ebdce86e93b9381c467f6fe87dbab53fb95dc264cb5e52da6e8f007877808a494efed2073a28ffa400fbf08d5550499a"}, 0x2b) 08:50:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1202, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x8) [ 550.293310][T18925] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 08:50:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x0, 0x9a, "bd41bd216c215f59a05592328b8f388c8ce4c2e96b0560c636166f3cccd42a2c7e000d62bfe963b9338fafd33f325c37d22230ba34cbbb7ad032f1e156fe3e512cb4cfcfb14e4d5204a8503bd791b5ad73e52cc2aa0213c32f2e6160c398478d8f6394596aa927852a83b4fe8a39e3bcb3ae9deb0fc6b1a85126433fa5378e99fed10697228ad7604eb6e000"/154}, 0x5) 08:50:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 08:50:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 08:50:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:37 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0}], 0x0, &(0x7f0000000e80)) 08:50:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "9765e32b2071ff4c", "46e9ce224e2717416251bfa4308a9e99", "dac6d9f4", "d15623df191b5941"}, 0x28) mmap(&(0x7f0000895000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3d1a6000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 08:50:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) r1 = dup(r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) 08:50:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 550.619405][T18946] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 550.645255][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:50:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:38 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 08:50:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, 0x0) 08:50:38 executing program 4: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="82021fe90b"], 0x10) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 08:50:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 08:50:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "9765e32b2071ff4c", "46e9ce224e2717416251bfa4308a9e99", "dac6d9f4", "d15623df191b5941"}, 0x28) mmap(&(0x7f0000895000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x3d1a6000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 08:50:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 08:50:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, 0x0) [ 551.122794][T18987] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 551.198893][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 551.210836][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 551.248439][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 551.297266][ T3925] loop1: p2 < > 08:50:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 08:50:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) r1 = dup(r0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) 08:50:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 08:50:38 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="6b9849a587f4765e97c0ff5c14ed105839092bdd20be616138eb0d9b3f33cbdb66c03aa3494b4953a5c9afb0a87c4453000001000000000001000000000000005f42485266535f4d070000000000000000005000000000000010100000000000000000000000000000000000000000000000e289bf9d000000d00000000000000600000000000000010000000000000000100000001000000010000061000000040000000000000000000000000000000000000000000000450100000000000002000000000100000000000000000072", 0xd0, 0x10000}], 0x0, 0x0) 08:50:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 08:50:39 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x108, &(0x7f0000000080), &(0x7f0000000100)=0x3) [ 551.604787][T19010] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 08:50:39 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x28000200) unshare(0x24020400) gettid() tkill(0x0, 0x0) 08:50:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "9765e32b2071ff4c", "46e9ce224e2717416251bfa4308a9e99", "dac6d9f4", "d15623df191b5941"}, 0x28) mmap(&(0x7f0000895000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x3d1a6000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 08:50:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) 08:50:39 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x7cbed76a49423918}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:50:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000000)=ANY=[@ANYBLOB='k'], &(0x7f0000000180)=0x8) 08:50:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) [ 552.003422][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:50:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r1, 0x701, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) [ 552.158549][T19038] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 552.183635][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:50:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 08:50:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 08:50:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1c, 0x10000001, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000040)=ANY=[@ANYRES32], 0x3ef) 08:50:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000300)=@builtin='builtin_trusted\x00') [ 552.555220][T19069] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 552.831234][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 552.841363][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 552.848136][ T3925] loop1: p2 < > [ 552.936386][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 552.946890][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 552.955658][ T3925] loop1: p2 < > 08:50:40 executing program 5: 08:50:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 08:50:40 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) shutdown(r1, 0x0) shutdown(r2, 0x0) 08:50:40 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x102, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)=0x6) 08:50:40 executing program 4: 08:50:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:40 executing program 4: 08:50:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 553.134975][T19092] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 08:50:40 executing program 5: 08:50:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x2c}}, 0x0) 08:50:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1202, &(0x7f00000000c0)=ANY=[], 0x8) 08:50:40 executing program 5: 08:50:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) [ 553.450168][T19111] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 08:50:41 executing program 1: 08:50:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x2c}}, 0x0) 08:50:41 executing program 3: 08:50:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c2000012", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:41 executing program 5: 08:50:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 08:50:41 executing program 5: [ 554.330121][T19132] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 08:50:41 executing program 3: 08:50:41 executing program 4: 08:50:41 executing program 5: 08:50:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 08:50:42 executing program 1: 08:50:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c2000012", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:42 executing program 3: 08:50:42 executing program 4: 08:50:42 executing program 5: 08:50:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 08:50:42 executing program 1: 08:50:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c2000012", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 554.757385][T19145] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 08:50:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) 08:50:42 executing program 3: 08:50:42 executing program 4: 08:50:42 executing program 5: 08:50:42 executing program 1: 08:50:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) [ 555.211941][T19162] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:42 executing program 4: 08:50:42 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@un=@abs={0x8}, 0x8) 08:50:42 executing program 3: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0xa0) 08:50:42 executing program 1: r0 = socket(0x2, 0x5, 0x0) bind(r0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 08:50:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, &(0x7f0000014a00)=ANY=[]) [ 555.393323][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:43 executing program 4: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r0, r1) [ 555.448155][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) [ 555.495707][ T3925] loop1: p2 < > 08:50:43 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7, 0x1, '/'}, 0x9) [ 555.624523][T19183] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 08:50:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 08:50:43 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 08:50:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, 0x0) 08:50:43 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) 08:50:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 08:50:43 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:50:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) r2 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xe, &(0x7f0000000040), 0x8) 08:50:43 executing program 4: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x8) 08:50:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 08:50:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, 0x0) 08:50:43 executing program 1: r0 = socket(0x2, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) dup2(r0, r1) [ 556.211176][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:43 executing program 3: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x14) [ 556.279248][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 556.308261][ T3925] loop1: p2 < > 08:50:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:43 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000001540)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[{0xc}], 0xc}, 0x0) 08:50:44 executing program 5: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x88) 08:50:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="80a1000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}], 0x0, 0x0) 08:50:44 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 08:50:44 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) 08:50:44 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto(r0, &(0x7f00000015c0)='1', 0x1, 0x0, &(0x7f0000001780)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 08:50:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:44 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0xb) 08:50:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:44 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 08:50:44 executing program 5: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="10034e21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3931d760602200000b2000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/129, @ANYRES32=0x0], &(0x7f00000000c0)=0xa0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000300)={r1}, &(0x7f00000001c0)=0xb8) 08:50:44 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) r2 = socket(0x2, 0x5, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:50:44 executing program 4: r0 = socket(0x2, 0x5, 0x0) r1 = dup(r0) sendto(r1, &(0x7f0000000200)='\f', 0x1, 0x81, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 08:50:44 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8202cde917"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000280)={r1}, &(0x7f0000000100)=0xb8) 08:50:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x64, 0x3}, 0x8100, 0xd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@phonet={0x23, 0x2, 0x3, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000003c0)="4deb4b72bb54a962a34014bf36a0efae2715a86e38a6e8999b90b5b966fd87310dbfa9d70738f8a44690f2427a8f52434380cc5dbfb0c6cbb9547f440d92dc34a4d84402a0fc48d867710beb3af1ae0be3010b00f8fffffeffffffff17512a7d94a4422e48a21c5497f5ff2acac1d3877dce7f6664103bba0b040a6901246fec49c5066b44507cd9b700"/150, &(0x7f00000005c0)=""/4096, 0x4}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_ro(r1, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700) openat$cgroup(0xffffffffffffffff, 0xfffffffffffffffe, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 08:50:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0xf679a3a3e8b319f6, 0x70, 0x5, 0x0, 0x8, 0xfc, 0x0, 0x0, 0x108, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0xf83e, 0x8, 0x0, 0x200, 0x4, 0x2}, 0xffffffffffffffff, 0x0, r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)) 08:50:44 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xfcfa, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/201, 0xc9, 0x0, 0x0, 0x1f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 08:50:44 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 08:50:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x5421, 0x400000) [ 557.671364][T19309] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.749030][T19317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:50:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:45 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000003c0), &(0x7f0000000280)=0xa0) 08:50:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000000000ce117006e19910e3b435b9d254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548be7d7858c5eae862f0bed925d0d11cc23b882015e70769f10d20a428f1d3a87f1045874c3b2b0eb84313fc7267a7bced2cc0", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x3a, r4, r7}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) 08:50:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) 08:50:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 08:50:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601809cf4c0a4e59ba2700100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 558.278129][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 08:50:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x64, 0x3}, 0x8100, 0xd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@phonet={0x23, 0x2, 0x3, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000003c0)="4deb4b72bb54a962a34014bf36a0efae2715a86e38a6e8999b90b5b966fd87310dbfa9d70738f8a44690f2427a8f52434380cc5dbfb0c6cbb9547f440d92dc34a4d84402a0fc48d867710beb3af1ae0be3010b00f8fffffeffffffff17512a7d94a4422e48a21c5497f5ff2acac1d3877dce7f6664103bba0b040a6901246fec49c5066b44507cd9b700"/150, &(0x7f00000005c0)=""/4096, 0x4}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_ro(r1, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700) openat$cgroup(0xffffffffffffffff, 0xfffffffffffffffe, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 08:50:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 08:50:46 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xfcfa, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/201, 0xc9, 0x0, 0x0, 0x1f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 08:50:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) recvfrom(r1, &(0x7f00000000c0)=""/40, 0xffffffffffffffe2, 0x0, 0x0, 0x0) 08:50:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) recvfrom(r1, &(0x7f00000000c0)=""/40, 0xffffffffffffffe2, 0x271, 0x0, 0x0) [ 558.663354][ T28] audit: type=1804 audit(1601369446.204:40): pid=19347 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir292952734/syzkaller.mMvSSq/430/cgroup.controllers" dev="sda1" ino=16329 res=1 errno=0 08:50:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) [ 558.775831][T19353] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.4'. [ 558.972987][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:46 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)="2cbf8104e1992ce4", 0x8}, {&(0x7f0000000880)}], 0x2, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0xb0c}}, @txtime={{0x18}}, @mark={{0x14}}], 0x48}, 0x20000080) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/118, 0x76}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x2}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) [ 559.026695][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 559.082514][ T3925] loop1: p2 < > 08:50:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) 08:50:46 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4a22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 08:50:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 08:50:46 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) 08:50:47 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:47 executing program 5: r0 = socket$kcm(0x10, 0x8000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f000000c100)=""/102400, 0x19000}], 0x1}, 0x0) 08:50:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 08:50:47 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x11, 0x0, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r3, &(0x7f0000000200), 0x43408) 08:50:47 executing program 3: 08:50:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 08:50:47 executing program 1: 08:50:47 executing program 3: 08:50:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:47 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) 08:50:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)=""/233, 0xe9}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6611, 0x0) 08:50:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:48 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:48 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x11, 0x0, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r3, &(0x7f0000000200), 0x43408) 08:50:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b04, &(0x7f0000000100)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9\x00\x0e\x0e\x00\x00\xff\x00\x00\x00\x00\x00,C\xfd\xea\xe3\x8d\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\b\"\xe4g\x89\x12=z\xbff\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1 ]X\x1e^9P\xee\x8aG\xc8~\x82\xf6\xaaJ\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW\xdc\xcf\xe9\x8d\xe8\xcf\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\x8a\xe3\x9c\x96\xf5\xf8\xb5\x19\twg\xe0\x04\x82\xbfSa\xb9\v\xb3\xb1\x05\xa05\xdc\x12\x86\xb9\xf93\xac\x1c\x1fXfQ\xab\x8c\xe2\xbe\xd4|\xd9\xd6y\\\xfd\xde0\x83\x7f\x80\xddH[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1d\x00\x00\x00\x00\x00\x00\x10\x00\x00\xaf\xf6\xbd2\x00\x00\x00\x00\x00\x00') 08:50:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) 08:50:48 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:48 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:48 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) [ 561.406854][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 561.443628][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:49 executing program 1: [ 561.500456][ T3925] loop1: p2 < > 08:50:49 executing program 4: 08:50:49 executing program 1: 08:50:49 executing program 2: 08:50:49 executing program 4: 08:50:49 executing program 1: 08:50:49 executing program 2: 08:50:49 executing program 4: 08:50:49 executing program 3: 08:50:49 executing program 2: [ 562.176885][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 562.202276][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 562.212524][ T3925] loop1: p2 < > 08:50:49 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:50 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:50 executing program 4: 08:50:50 executing program 3: 08:50:50 executing program 2: 08:50:50 executing program 1: 08:50:50 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x10852, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10008, 0x10001ef, 0xfffffffc, 0x3, 0x5}, r1, 0x9, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r4) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4eac, 0x12) 08:50:50 executing program 2: 08:50:50 executing program 4: 08:50:50 executing program 1: 08:50:50 executing program 3: 08:50:50 executing program 4: 08:50:50 executing program 5: 08:50:50 executing program 0: 08:50:50 executing program 2: 08:50:51 executing program 1: 08:50:51 executing program 3: 08:50:51 executing program 4: 08:50:51 executing program 2: 08:50:51 executing program 5: 08:50:51 executing program 0: 08:50:51 executing program 1: 08:50:51 executing program 3: 08:50:51 executing program 2: 08:50:51 executing program 4: 08:50:51 executing program 5: 08:50:51 executing program 0: 08:50:51 executing program 1: 08:50:51 executing program 3: 08:50:51 executing program 5: 08:50:51 executing program 2: 08:50:51 executing program 4: 08:50:51 executing program 0: 08:50:51 executing program 3: 08:50:51 executing program 1: 08:50:51 executing program 2: 08:50:51 executing program 5: 08:50:51 executing program 4: 08:50:51 executing program 0: 08:50:52 executing program 3: 08:50:52 executing program 0: 08:50:52 executing program 5: 08:50:52 executing program 4: 08:50:52 executing program 2: 08:50:52 executing program 1: [ 564.598832][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:52 executing program 0: 08:50:52 executing program 3: [ 564.644425][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 564.675784][ T3925] loop1: p2 < > 08:50:52 executing program 4: 08:50:52 executing program 2: 08:50:52 executing program 5: 08:50:52 executing program 1: 08:50:52 executing program 0: 08:50:52 executing program 3: 08:50:52 executing program 5: r0 = socket(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x7ffff000}}, 0x0) 08:50:52 executing program 4: write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 08:50:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 08:50:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x0, 0x0, "d70275b2b5cb3bff19974d820f61e31b3e260ba8f0dd9e54380e4bac95688783"}) 08:50:52 executing program 3: 08:50:52 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) 08:50:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @empty}, 'wg1\x00'}) [ 565.206432][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_to_hsr\x00'}) 08:50:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, 0x0) [ 565.291633][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:52 executing program 3: pipe2$9p(&(0x7f0000000700), 0x0) 08:50:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) [ 565.351251][ T3925] loop1: p2 < > 08:50:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x54e3, 0x0) 08:50:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x127b, 0x0) 08:50:53 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0x4000340) 08:50:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)={@void, @val, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local}}, 0x2000011e) 08:50:53 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xb101, 0x0) 08:50:53 executing program 5: r0 = socket(0x23, 0x80002, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000100)) 08:50:53 executing program 4: io_uring_setup(0x491a, &(0x7f0000000000)={0x0, 0x0, 0x2}) clone3(&(0x7f0000001240)={0x100002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:50:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0xffffffffffffff89) 08:50:53 executing program 0: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) 08:50:53 executing program 1: socketpair(0x1e, 0x0, 0x8, &(0x7f0000000580)) 08:50:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x78, {0x2, 0x0, @empty}, 'wg1\x00'}) [ 565.806395][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:53 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5411, 0x0) 08:50:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x401070cd, 0x0) [ 565.866635][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 565.905483][ T3925] loop1: p2 < > 08:50:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e6574646e6574646576"], 0x3c}}, 0x0) 08:50:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x92}, 0x40) 08:50:53 executing program 3: keyctl$dh_compute(0xf, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:50:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xa, 0x0, "d70275b2b5cb3bff19974d820f61e31b3e260ba8f0dd9e54380e4bac95688783"}) 08:50:53 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 08:50:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x87000, &(0x7f0000000740)) 08:50:53 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 08:50:53 executing program 0: socket$inet6(0xa, 0x0, 0x40) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000000040)={@rand_addr=' \x01\x00', @ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}) 08:50:53 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0}}) 08:50:54 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x402c542b, 0x0) 08:50:54 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) 08:50:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, 0x0) 08:50:54 executing program 2: r0 = socket(0x2, 0x3, 0x2) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 08:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000054c0)=[{{&(0x7f0000002340)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0xbb8) 08:50:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4, @private0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1080000}) 08:50:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x80d28, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000300)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 08:50:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) 08:50:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xc}, {0x6}]}) 08:50:54 executing program 1: r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @private=0xa010101}, 0x10) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)={0x12, 0x9, 0x4, 0x4004, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f00000001c0)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:54 executing program 2: r0 = socket(0x2, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) 08:50:54 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) [ 566.908660][ T28] audit: type=1326 audit(1601369454.445:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19658 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 08:50:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0) 08:50:54 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0x100, 0x6, 0x7ff, 0x10001, 0x94}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10080, 0x0) r0 = getpid() ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x0, 0x122) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x0, r1, 0x0) getpid() r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="e958415e09a4107373c4348ba2d79f1fe05fea085e84a0af812633ed2013e39a0bac3cecc6ac4582df7986353103dd0d7c124c9fb9ad3d4d41adfd42857952fa59869cf8d98220e7311701c4ef37b9cedb66af1409479236f611cf0dcaaebc5f57a3f75ca4ba81ce1b6f35cd6e6d62b6ccd021a4c773f5b124d4c0585b0231623fb84cfa7561a4b7617b00bf8135cc43dfe4b8821a8a151dc154d1c1", 0x9c) clone3(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8db, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x163, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xe, r2, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r3 = getpid() r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x400800, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = getpid() rt_tgsigqueueinfo(r3, r5, 0x16, &(0x7f0000000000)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:50:54 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x519000, 0x0) 08:50:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x80041284, 0x0) 08:50:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x80287010, 0x0) 08:50:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000240)=ANY=[], 0x48) 08:50:54 executing program 3: r0 = socket(0x18, 0x800, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 567.677063][ T28] audit: type=1326 audit(1601369455.215:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19658 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 08:50:55 executing program 5: keyctl$restrict_keyring(0x18, 0x0, 0x0, 0x0) 08:50:55 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 08:50:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x9, [@remote, @empty, @dev, @local, @empty, @dev, @dev, @remote, @link_local]}) 08:50:55 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000001480), 0x10) 08:50:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, &(0x7f0000000300)={@val, @val, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @private, @empty, @remote}}, 0x2a) 08:50:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x0, 0x0, "b552a9dc7c0d790f4ec2812d1975e7682b6f8dac3fe4e2a2"}) 08:50:55 executing program 5: keyctl$restrict_keyring(0x6, 0x0, 0x0, 0x0) 08:50:55 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x5, "a309ff0f00005f56d3adff7f9d5e9a099cbab35a2fdbede5fbd0978b01ba590e94bb02f6b7807e5dadca47306a5bc6c5e7be7805000000000000001500000023d70b463b42ec0893c5b323c67936e5099c12d6ea4752a584"}, 0x68) 08:50:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d9, &(0x7f0000000140)={0x0, 0x3, [@remote, @empty, @dev]}) 08:50:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000991e0000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:55 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40040d0) 08:50:55 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x11, 0x0, @ipv4={[], [], @empty}}}, 0x24) 08:50:55 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 08:50:55 executing program 4: syz_open_dev$mouse(0x0, 0x0, 0x0) 08:50:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1278, 0x0) 08:50:55 executing program 0: r0 = epoll_create(0x4000c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 08:50:55 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x24, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x24) 08:50:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x1}, 0x10}}, 0x0) 08:50:56 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'ip6gretap0\x00'}}, 0xffffffffffffff85) 08:50:56 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) [ 568.563882][T19735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=19735 comm=syz-executor.3 08:50:56 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 08:50:56 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x2}, 0x38, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x492492492492494, 0x0) 08:50:56 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcsa\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8000000) 08:50:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 08:50:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'veth0_macvtap\x00'}) 08:50:56 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mincore(&(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f0000000480)=""/143) 08:50:56 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x125142) 08:50:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000003500)=[{&(0x7f0000000080)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x1, 0x0) 08:50:56 executing program 2: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x401, 0x6002) 08:50:56 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x402c542d, 0x0) 08:50:56 executing program 5: perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:50:56 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x756e, 0x20}) [ 569.053997][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:56 executing program 0: r0 = socket(0x2, 0x6, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 08:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f0000000140)={'tunl0\x00', 0x0}) 08:50:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) [ 569.096497][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 569.120046][ T3925] loop1: p2 < > 08:50:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8918, 0x0) 08:50:56 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x100, 0x4) 08:50:56 executing program 2: r0 = socket(0x2a, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 08:50:56 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 08:50:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 08:50:56 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r0, 0x84, 0x1, 0x0, 0x0) 08:50:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d6, 0x0) 08:50:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffe) 08:50:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 08:50:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="05010000ff"], 0xf) 08:50:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8004550f, 0x0) [ 569.549564][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 569.581033][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:57 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f0000000340)) [ 569.614105][ T3925] loop1: p2 < > 08:50:57 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 08:50:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0203020001800000006747"], 0x1e) 08:50:57 executing program 1: r0 = socket(0x2, 0x1, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null, @default, @bcast]}, 0x48) 08:50:57 executing program 0: getpid() r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x80) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x950002f6) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) 08:50:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000100)=ANY=[]}) 08:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f0000000040)="db08c945e58d54148eccf7349302ff5612c1881fdf8c6c63220474a7cd416817f6b1c2a48fd00acc39bb76a6cb9059d72a11b7b4d58d", 0x36, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 08:50:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:57 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x6, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) 08:50:57 executing program 1: socketpair(0x5f, 0x0, 0x0, &(0x7f0000000180)) 08:50:57 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 08:50:57 executing program 5: clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58) [ 570.052818][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:57 executing program 3: r0 = socket(0x23, 0x80002, 0x0) accept$unix(r0, 0x0, 0x0) 08:50:57 executing program 1: r0 = socket(0x26, 0x5, 0x0) accept$packet(r0, 0x0, 0x0) 08:50:57 executing program 2: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x94) [ 570.109474][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:50:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4008550d, 0x0) [ 570.171809][ T3925] loop1: p2 < > 08:50:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000003c0)="7fff7957e01ba585ff17ed2a07de9f66a50fd383e804a724f195fdd9a9a418c3dfe4aa385e9d30c96e588a", 0x2a}, {&(0x7f00000000c0)="f053105269d28598cc6a1e2e5d34bcc628d788475cd2166a13223cf096864ac817266ab7a02afb628f0b379e397403ad2d4eaff1fb9af540ae9f7d1f4ac933aeb7909c7f68de44a8aeba126eca826702f629a3249d8b7314c8fdc0859245b28caaad4ebf4c5bc2e42f30a0d72c63099166a1dbfd5a2ba5fb5507eb20b2100600000000000000f8dad0d847a6f1a3f15f40b5be99d98bcac81d79298c88bad861149de45b8e39c255d63d1d217ee8fba8e75581f6cfbd4bb9d473db8e6406bd", 0xbf}, {&(0x7f0000000180)="9b045b1f68f3bcc21b719d888229e4645d5fa6e9b8133f29559c0e0c5c10de0c40338871cc75dc70c36332b6788219a773e09ed2552bb42874dc2c1e0b942aafa7250c7e5b332afec88d625e9fdb04", 0x4f}, {&(0x7f0000000200)="2fef2a8f3a0007b8f96516b4f69610f95df297144b4f0dc7cc032999bdfb24b18021e19410eede3cd1fa0736ff71dd7302ac17aefe6e7366d91176685d4f2c2d986af91d5ca2c4060ab6c28034e1408c3743f5a6b23508223fcd6717af779d67f2ab1c66efca4c9039c11b6c13b4c6c9f447cd7ae10af9ed9aad146a443257e8d545ae28c4d5f1be9d87f036cf10ba2f4f6993384f9882b5ea6987628418a05998eb3b79d695830d29ac999d93049ed7bd535aca1ab81000ea674c44ab72a1afe9446aca117800bd8518a75cbf39d50354be7257d1d23aacda1d102219da71b39c8d130047b7", 0xe6}], 0x4, 0x0, 0xff64, 0x4000814}, 0x15) 08:50:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 08:50:57 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 08:50:57 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf0ff7f}}, 0x0) 08:50:57 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) 08:50:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0xb, @raw_data="ffc966a73e822a8c7dde9375d84acad2d6bf730599c5807c774160d180cdcb667d2df13ce148e017c8462fb7024699ea1c6613a7bc6293cd81ff7e37ab1cfe6604d6740c854fa59e7422d426016f260704f7fcfd2aba9d0f293a7455093afd0ff1d15003c481f0516ebaaa4d6a3b7453751f299ca65d4138b6c961fab4c4ecb0cd8ffa2786dc2644ef8b28449c484c6cf9774af3406c23b9d39e93bb834f8f684b796b3ca681a02a0e5e6316f80f5f5008a9532d4d3e1cdc36c069e8c1881ff2b2b3a1de5c59c66b"}) 08:50:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr, {[@timestamp_prespec={0x44, 0x4}]}}}}}) 08:50:58 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$netrom(r0, 0x0, 0x0, 0x14040051, 0x0, 0x0) 08:50:58 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) 08:50:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 08:50:58 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)='-^$\x00') 08:50:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:58 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 08:50:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYRESDEC], 0xb0}}, 0x0) 08:50:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:50:58 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') socket$nl_generic(0x10, 0x3, 0x10) 08:50:58 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x0) 08:50:58 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004100)={0x10}, 0x10) 08:50:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1261, 0x0) 08:50:58 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x40800) read$FUSE(r0, 0x0, 0x0) 08:50:58 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 08:50:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x4, 0x4}) 08:50:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 08:50:58 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000003c0)={0x0, 0x38, &(0x7f0000000000)={0x0}}, 0x200010c0) 08:50:58 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) connect(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) 08:50:58 executing program 1: r0 = socket(0x2, 0x3, 0x2) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}, 0x40) 08:50:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000080)={'macvlan1\x00', @ifru_names}) 08:50:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)=""/233, 0xe9}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6611, 0x0) 08:50:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)=ANY=[]}) 08:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x10001}) 08:50:59 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 08:50:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) write$hidraw(r0, 0x0, 0x0) 08:50:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x0, 0xe, "b2f02f7f6053f21a60bfa054"}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@private}, {}]}, @ssrr={0x89, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) 08:50:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto(r0, 0x0, 0x0, 0x24000000, 0x0, 0x0) [ 571.633649][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:50:59 executing program 5: r0 = socket(0x2, 0x3, 0x2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 08:50:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000ffc000/0x4000)=nil}) [ 571.709326][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 571.755859][ T3925] loop1: p2 < > 08:50:59 executing program 1: r0 = socket(0x2, 0x6, 0x0) bind$isdn_base(r0, 0x0, 0x0) 08:50:59 executing program 2: socket$packet(0x11, 0x0, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 08:50:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)=""/233, 0xe9}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6611, 0x0) 08:50:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}}}) 08:50:59 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5434, 0x0) 08:50:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4}]}}}}}) 08:50:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1263, 0x400000) 08:50:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 08:50:59 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) 08:50:59 executing program 5: add_key$keyring(0xfffffffffffffffd, 0x0, 0x0, 0xffff0f00, 0xfffffffffffffffc) 08:50:59 executing program 1: keyctl$dh_compute(0x9, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:50:59 executing program 0: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x4, 0x0) 08:50:59 executing program 2: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000004c0)="01", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r2}, 0xfffffffffffffffd, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={'sha224-generic\x00'}, 0x0, 0x5}) 08:50:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, &(0x7f0000000140)) 08:51:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000002340)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x0) 08:51:00 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, &(0x7f0000000280)) 08:51:00 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000440)) 08:51:00 executing program 0: keyctl$restrict_keyring(0x19, 0x0, 0x0, 0x0) 08:51:00 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 08:51:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x40}], 0x1, 0x0) 08:51:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x40101283, 0x400000) 08:51:00 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 08:51:00 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 08:51:00 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002400)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 08:51:00 executing program 4: syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x11) 08:51:00 executing program 2: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000200)="3791a861f61ec97d46", 0x9}], 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) 08:51:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080), 0x400000, 0x0}}) 08:51:00 executing program 1: syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x519, 0x40040) 08:51:00 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) 08:51:00 executing program 0: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 08:51:00 executing program 2: syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x271000, &(0x7f0000000400)) 08:51:00 executing program 4: r0 = socket(0xf, 0x3, 0x2) recvfrom$packet(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) 08:51:00 executing program 5: mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4030, 0xffffffffffffffff, 0x0) 08:51:00 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1, 0x10001}}, 0x24) 08:51:00 executing program 3: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40), 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc42, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9c86569cbf47196098a0142191c215517366165c910711c7e977411fd7e9c092b808cf76aad4ea0f356ad3940d512139338105d200d5492f517494976b2e564c7118af50fc34559dc35d1e8d2bae6b0fd97d6001498208c3d89f452b3acce89e73962000212fd4df3a4ce94e72d981594cc621e299", 0x75, 0x9}, {&(0x7f0000000140)="ec21a80eb87dd44803ab78d57dda77bf3d8579dfc312acf4b7939a2db7da03a9aae699691e73e039b1e4cdb30323e0972992af71ef0f1d5a349f4c2f9bdb7b34712d26a76960d67d753b931286686793ac170fc37f2977376b59f2aadbf2d7ca8128bbd073deda611ef94a4b2071e35baf266085fe376414a64049ab9cb1b38df6c41632adbfc14db3b3632a6c58937af1ead57b089a89d1e5df376c747ba79504d48fc5bc8ac56c54cf8e7aa8238ee2257a4f0be03328903b2491127ad53dae9db97a8d1f2448f94779d2", 0xcb, 0x100}, {&(0x7f0000000240)="8796358f32c13b95cb1ad73213e71cf862c274387dd5c3cb6913f3f95162f8526889e1664a2f555ae55520149947d4fe264e87b088b1252f9cf437d2da2ff50060488c4d60dd7485027decad1055e38d6369d3342809bea6125d207cf1e916516e81f45b6ca69aebd86ea4b5141efab9433d55946a8f989463fc6ee7", 0x7c, 0x1f}, {&(0x7f00000002c0)="b2810956fa3d96122e889da2e1f129f215c2859d58d0ef96fee56560b7519a9a8006c16e788b258074449f079ccee6baf9c9707fa5ccda99f6e6acd3cc3ef7b30cc7627b837c4970e30b1623ed6bb0609c7d7ae489", 0x55, 0x8}, {&(0x7f0000000340)="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", 0xff, 0x6f}, {&(0x7f0000000440)="bc544e2271e94349d9c07feb3abcab53461644b82d22202ecbfa2ce098d8c4c8f1ce7f89955c1c54a909bdbf1533d945b2a02f004d333c8d8baf17d40eb99650dc76403d84eef51a24e574d5ce0945d0d18c5846321dd6e582c73bb0cc47ba60016686e7e047a02cc824680158", 0x6d, 0x3}], 0x0, &(0x7f0000000640)={[{@noinline_dentry='noinline_dentry'}, {@noinline_xattr='noinline_xattr'}, {@fastboot='fastboot'}, {@flush_merge='flush_merge'}, {@extent_cache='extent_cache'}]}) 08:51:00 executing program 2: bpf$PROG_LOAD(0x10, 0x0, 0x0) 08:51:00 executing program 4: keyctl$dh_compute(0x14, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:51:00 executing program 0: r0 = gettid() r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002340)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 08:51:00 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000000)=0x80000001, 0x4) 08:51:01 executing program 1: socketpair(0x29, 0x5, 0x0, &(0x7f0000000180)) 08:51:01 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getpeername(r0, 0x0, 0x0) 08:51:01 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./bus\x00') setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='security.capability\x00', 0x0, 0x0, 0x0) 08:51:01 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000d36000/0x4000)=nil, &(0x7f0000d39000/0x2000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) 08:51:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private2, 0x0, 0x0, 0x4}) 08:51:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, 0x0) 08:51:01 executing program 3: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x2120800, &(0x7f0000000940)) 08:51:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 08:51:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40247007, 0x0) 08:51:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x3, 0x0, 0x6}, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast}}, 0x1e) 08:51:01 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) [ 573.918037][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:01 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0xc3c0, 0x0) [ 573.967691][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 573.989279][T20076] overlayfs: './file0' not a directory [ 574.010266][ T3925] loop1: p2 < > 08:51:01 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) 08:51:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18}, 0x18) 08:51:01 executing program 4: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil) 08:51:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80045510, 0x0) 08:51:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000140)={'tunl0\x00', 0x0}) 08:51:01 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000180)) 08:51:01 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x210240, 0x0) 08:51:01 executing program 1: r0 = socket(0xa, 0x3, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 08:51:01 executing program 5: fanotify_mark(0xffffffffffffffff, 0x0, 0x99b71bc53f40e4aa, 0xffffffffffffffff, 0x0) 08:51:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x540b, 0x0) [ 574.416960][T20103] can: request_module (can-proto-0) failed. 08:51:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:02 executing program 0: socketpair(0x25, 0x5, 0x10000, &(0x7f0000000340)) [ 574.471652][T20103] can: request_module (can-proto-0) failed. 08:51:02 executing program 2: socketpair(0x29, 0x0, 0x0, &(0x7f0000000180)) 08:51:02 executing program 5: getpid() 08:51:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) write$tun(r0, 0x0, 0xf0ffffff7f0000) 08:51:02 executing program 1: r0 = socket(0x2, 0x3, 0x2) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 08:51:02 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x700009af) 08:51:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) 08:51:02 executing program 5: r0 = socket(0x11, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000040)={'team0\x00'}) 08:51:02 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40042, 0x0) 08:51:02 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) 08:51:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0xa, [@link_local, @broadcast, @empty, @dev, @random="675df71bed59", @random="b9ce6d79f4e6", @empty, @random="c1e3818d6eba", @broadcast, @multicast]}) 08:51:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) [ 574.889994][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:02 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getpeername$netrom(r0, 0x0, &(0x7f00000000c0)) 08:51:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:02 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x111200, 0x0) [ 574.936482][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 574.964753][ T3925] loop1: p2 < > 08:51:02 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5460, 0x0) 08:51:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f894ce, 0x0) 08:51:02 executing program 0: keyctl$dh_compute(0x1e, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000180)={0x0}) 08:51:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 08:51:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x900) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 08:51:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto(r0, 0x0, 0xffffff0f, 0x404c821, 0x0, 0x0) 08:51:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @local}, @ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x300}) 08:51:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:51:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x894b, 0x0) 08:51:02 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 08:51:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454de, &(0x7f0000000140)) 08:51:02 executing program 1: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 08:51:02 executing program 3: socketpair(0x1e, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) [ 575.432624][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020ae76, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 08:51:03 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) close(r1) [ 575.509444][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 575.545134][ T3925] loop1: p2 < > 08:51:03 executing program 1: r0 = socket(0x23, 0x80002, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 08:51:03 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@isdn, 0x80, 0x0}, 0x0) 08:51:03 executing program 2: r0 = socket(0x18, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:51:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfe}]}]}, 0xfc}}, 0x0) 08:51:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 08:51:03 executing program 1: clone3(&(0x7f00000014c0)={0x40000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:51:03 executing program 3: keyctl$dh_compute(0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0) [ 575.732067][T20192] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 575.818630][T20192] REISERFS (device loop0): using ordered data mode [ 575.825179][T20192] reiserfs: using flush barriers 08:51:03 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000001680)='/dev/midi#\x00', 0x2000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000001c0)) 08:51:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d8, &(0x7f0000000140)) [ 575.889316][T20192] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 08:51:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x9, 0x0, "d70275b2b5cb3bff19974d820f61e31b3e260ba8f0dd9e54380e4bac95688783"}) [ 576.058077][T20192] REISERFS (device loop0): checking transaction log (loop0) [ 576.168301][T20192] REISERFS (device loop0): Using rupasov hash to sort names [ 576.189976][T20192] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 08:51:03 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) close(r1) 08:51:03 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000), 0x4) 08:51:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x125f, 0x0) 08:51:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @local}, @ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x300}) 08:51:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x34}]}) 08:51:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:03 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) 08:51:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0x4020940d, &(0x7f0000000300)={0x3}) 08:51:04 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "81e9b9c9419e288bcb4f67abbb7befa8e1940c06011d5d133b3573290597c8e74dabe05a846bc9dd920ebac9e1309f004e70cd67c7aa84de938749eb1650b1"}, 0x60, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x88}, 0x0) 08:51:04 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x3ec, @private2}}, 0x24) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:04 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 08:51:04 executing program 1: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 576.626157][T20239] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 576.656267][T20239] REISERFS (device loop0): using ordered data mode [ 576.699538][T20239] reiserfs: using flush barriers [ 576.724132][T20239] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:04 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) close(r1) 08:51:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x9}) 08:51:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x4d}, {0x6}]}) 08:51:04 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) 08:51:04 executing program 5: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{0x0}], 0x0, 0x0) shmat(0x0, &(0x7f0000ff3000/0xd000)=nil, 0xd000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 08:51:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) [ 576.804867][T20239] REISERFS (device loop0): checking transaction log (loop0) [ 576.816052][T20239] REISERFS (device loop0): Using rupasov hash to sort names [ 576.826510][T20239] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 08:51:04 executing program 4: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r0}, 0xfffffffffffffffd, 0x0, 0x0) 08:51:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 08:51:04 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000001980)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000019c0)='syzkaller\x00', 0x5, 0xef, &(0x7f0000001a00)=""/239, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:04 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40049409, 0x0) 08:51:04 executing program 4: r0 = socket(0x11, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, 0x0) 08:51:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 577.319438][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 577.340383][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 577.347293][ T3925] loop1: p2 < > [ 577.402529][ T28] audit: type=1326 audit(1601369464.946:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 [ 577.439899][T20283] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 577.450043][T20283] REISERFS (device loop0): using ordered data mode [ 577.456780][T20283] reiserfs: using flush barriers [ 577.465407][T20283] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 577.494314][T20283] REISERFS (device loop0): checking transaction log (loop0) [ 577.503339][T20283] REISERFS (device loop0): Using rupasov hash to sort names [ 577.512478][T20283] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 08:51:05 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) close(r1) 08:51:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 577.681868][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 577.702605][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 577.715184][ T3925] loop1: p2 < > [ 577.721366][ T28] audit: type=1326 audit(1601369465.266:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 [ 577.744952][T20296] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 577.759750][T20296] REISERFS (device loop0): using ordered data mode [ 577.766550][T20296] reiserfs: using flush barriers 08:51:05 executing program 3: r0 = socket(0x11, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8971, &(0x7f0000000040)={'team0\x00'}) 08:51:05 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x8, 0x0, 0x0, @time, {}, {}, @raw8={"5b378e295d47c527eb69a29e"}}], 0x38) 08:51:05 executing program 1: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 08:51:05 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000140)) 08:51:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x6c}, 0x1, 0x0, 0x2}, 0x0) [ 577.773231][T20296] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 577.794929][T20296] REISERFS (device loop0): checking transaction log (loop0) [ 577.805178][T20296] REISERFS (device loop0): Using rupasov hash to sort names [ 577.815243][T20296] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 577.886135][T20296] REISERFS error (device loop0): reiserfs-2025 reiserfs_cache_bitmap_metadata: bitmap block 17 is corrupted: first bit must be 1 [ 577.900796][T20296] REISERFS (device loop0): Remounting filesystem read-only [ 577.911075][T20296] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4 on readonly FS 08:51:05 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) 08:51:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'lo\x00'}) 08:51:05 executing program 2: keyctl$restrict_keyring(0x3, 0xfffffffffffffffd, 0x0, 0x0) 08:51:05 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5423, 0x0) 08:51:05 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x70100, 0x0) 08:51:05 executing program 3: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x3, 0x0, r1) 08:51:05 executing program 5: syz_mount_image$cramfs(&(0x7f0000000080)='cramfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x247c88, &(0x7f0000000140)) 08:51:05 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000003c00)={0x2020}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000140)={0x78, 0x0, r1, {0x7}}, 0x78) 08:51:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x127f, 0x0) 08:51:05 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40047459, 0x0) [ 578.255955][T20330] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 578.275513][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 578.281921][T20330] REISERFS (device loop0): using ordered data mode [ 578.302408][T20330] reiserfs: using flush barriers [ 578.310847][T20330] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 578.337387][T20330] REISERFS (device loop0): checking transaction log (loop0) [ 578.346792][T20330] REISERFS (device loop0): Using rupasov hash to sort names 08:51:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007f80)=[{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000003c0)='T', 0x1}], 0x1, &(0x7f0000002540)=ANY=[@ANYBLOB="1c0000000000000001"], 0xa0}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) [ 578.355138][T20330] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 578.360917][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 578.373220][ T3925] loop1: p2 < > 08:51:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:06 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) 08:51:06 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x24) 08:51:06 executing program 5: socketpair(0x1e, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf0ff7f}}, 0x0) 08:51:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "b8f68d", 0x10, 0x21, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a96fa5", 0x0, "6e86b2"}}}}}, 0x42) 08:51:06 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) io_uring_setup(0x1929, &(0x7f0000000100)={0x0, 0x0, 0x36, 0x0, 0x0, 0x0, r0}) 08:51:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000054c0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @local}, 0x10, 0x0}}, {{&(0x7f0000004700)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x24}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x5000}}], 0x2, 0x0) 08:51:06 executing program 5: r0 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r0, &(0x7f0000000000), 0x6) 08:51:06 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[], 0x80}}, 0x0) 08:51:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x11, @remote, 0x4e23, 0x0, 'sh\x00'}, 0x2c) [ 578.801212][T20375] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 578.833036][T20375] REISERFS (device loop0): using ordered data mode 08:51:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x2, 0x0) [ 578.865459][T20375] reiserfs: using flush barriers [ 578.887755][T20375] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 578.911879][T20375] REISERFS (device loop0): checking transaction log (loop0) [ 578.923824][T20375] REISERFS (device loop0): Using rupasov hash to sort names 08:51:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 578.941583][T20375] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 08:51:06 executing program 0: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 08:51:06 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x80) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x950002f6) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) 08:51:06 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 08:51:06 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, 0x0}, 0x0) 08:51:06 executing program 4: r0 = socket(0x25, 0x1, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) 08:51:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 08:51:06 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0xffffffff20003078) 08:51:06 executing program 5: r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xfff) 08:51:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000300)={0x4}) 08:51:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454dc, &(0x7f0000000140)={0x0, 0x1, [@remote]}) 08:51:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454c8, 0x0) [ 579.378638][T20408] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 579.419220][T20408] REISERFS (device loop0): using ordered data mode [ 579.454597][T20408] reiserfs: using flush barriers 08:51:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, 0x0, 0x0) [ 579.463168][T20408] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 579.525592][T20408] REISERFS (device loop0): checking transaction log (loop0) [ 579.547753][T20408] REISERFS (device loop0): Using rupasov hash to sort names [ 579.562394][T20408] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 08:51:07 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 08:51:07 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 08:51:07 executing program 4: keyctl$dh_compute(0xc, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:51:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454de, &(0x7f0000000140)={0x0, 0x1, [@remote]}) 08:51:07 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x2000000002, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x3, @raw_data="e0bd12474d30679a7a573e58cecef63fa9f37efc0ebf1e36a29aa234b2f36e7909ad3092d59ab077b237a39b3c181b59ccf84145b9f66641b75a6dc013bf9d87c8544f75789c9c8d145a966bf4b4691ffa5a49526f7e264d6282896abbddc3c64e7d8691b7e7cd9e0281d1e30712c01ab447acebb838ccff0a5d412efc28097f26362e87cabdb1d97e5ed26acd345ddcd96bebfcdd58f40c7b5db1a81c670a10951903b2036417bc05b5e94652035ce47ca61bb5296e80e403307d42aebb153b8c7fbb9e2de19845"}) 08:51:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xa, 0x0, 0x0) [ 579.720247][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 579.755932][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:51:07 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x24040805, 0x0, 0x0) 08:51:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0x4}]}}}}}) [ 579.781260][ T3925] loop1: p2 < > 08:51:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffffd) 08:51:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 08:51:07 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xa8}}, 0x0) [ 579.932534][T20447] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:07 executing program 4: r0 = socket(0x18, 0x0, 0x1) accept4$inet(r0, 0x0, 0x0, 0x0) [ 580.023488][T20447] REISERFS (device loop0): using ordered data mode [ 580.095129][T20447] reiserfs: using flush barriers [ 580.144018][T20447] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 580.209572][T20447] REISERFS (device loop0): checking transaction log (loop0) [ 580.230606][T20447] REISERFS (device loop0): Using rupasov hash to sort names [ 580.247515][T20447] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 08:51:07 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x40040d0) 08:51:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 08:51:07 executing program 2: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x14341) 08:51:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, &(0x7f0000000140)) 08:51:07 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:07 executing program 1: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x4, 0x0, r1) 08:51:08 executing program 3: socketpair(0x1e, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}}, 0x0) 08:51:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0) 08:51:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x1002, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xa, @raw_data="0d7803df1564006c6be8119c5018900cb71b0b1efa92ad4b66d013aa577e9ec3b7bcb01e7a47326cf4ac04bf2aeb26b70a23d5f17228a8d948282e51e15b909fa8b93af8ba70f20a7faa083be74c9f23dfbb4a0eb27ff13ed8487c0c1b3be41cff93ea0237965b623d3b04ccc065616db207f0f7a926eb2811441581260432cb1e947e964c8422b92296f43f2244b16993f3c656c14a2cf367c9d22d458873c9a4b1ff1e51a9c0677758cd589008b1823dc8645df55a9490d3b9071a383d4e423b64f39b3133da6a"}) 08:51:08 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_add_memb(r0, 0x84, 0x1, 0x0, 0x0) [ 580.600503][T20494] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 580.614574][T20494] REISERFS (device loop0): using ordered data mode [ 580.637525][T20494] reiserfs: using flush barriers 08:51:08 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) 08:51:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) [ 580.656459][T20494] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:08 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0xa8}}, 0x0) [ 580.764400][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 580.774860][T20494] REISERFS (device loop0): checking transaction log (loop0) [ 580.792143][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 580.803117][T20494] REISERFS (device loop0): Using rupasov hash to sort names [ 580.838297][T20494] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 580.854700][ T3925] loop1: p2 < > 08:51:08 executing program 5: keyctl$restrict_keyring(0x9, 0x0, 0x0, 0x0) 08:51:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1267, 0x0) 08:51:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5420, 0x0) 08:51:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x6, r1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)='-^$\x00') 08:51:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) 08:51:08 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 08:51:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x200002ac}}, 0x0) 08:51:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 08:51:08 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454d7, &(0x7f0000000140)) 08:51:09 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000000c0), 0x10) 08:51:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000b80)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000180)="fbc32c782d23264e3a320a7316ef28056a60c1a204876ab9b06ce70d3095a4be0f02ecc0391eea7383c5c5c8786ef9bd228d8b1a3f7b8f82d2903cc3de5e099b77dc65dd748e3def2477accdd9d999d58426cacaf8ac", 0x56}, {&(0x7f0000000200)="3791a861f61ec97d461fde3f5b5ffa40429c9f8465a4a8706a0204180a29711c4fb9b4de88327081094a277137c818e2eef44542d61aabd44e8efba5f1ff32c0ddb0cb0d6abb0594e35bc957637b3704771779183da05889b1e8c33f0ec1b90c3d52932bbbc5952543743a4f00"/122, 0xffffffffffffffaa}, {&(0x7f0000000280)="2899a4a2fb27a1d61b60f3a1208c86b0f1d1f9aa6277c09c772eb2a202dbf7f6462dd02522011bc2799405edc1610d59803a9c7b0b2c5547514e5b45fd3dddfb373d6df73e9e551b70468106a98c71236457f4651f1a06caed9358e50b03d31d4636da2a7159a0b9e0aa", 0x6a}, {&(0x7f0000000300)="cc8d1ae9659ecb4618b4cf81903cc7b3c1d7a6e335788fe7cf9f599898d785769138ec68ae3f3386b48bfec62d351d49a59decdd6dc7284706f9ae510749a23060da", 0x42}, {&(0x7f00000003c0)="d4d25faa7497a00c09b8aaa30ec64bfd418ecc6dbe1bc9a318ce6a972e9bbb474eafc7af147313d159a19907186192b2bbe647ab7b4422df213d0f7494c336a3f2ed121aae2267fae3043ae449529c5b113db350abe8187736f3117508494df22c7d5c9ab820a7739da39aa0cdc66cbafcf80fdeeeb0eb4a5abf5f033de7f4164b7a2d379fe6fdc4875ba4fee7099d9e9b42b6f8ec6ef5faa08fcfe4dae9346cda0d7354990a2baa96723052458fe5112f52d1bd26a3e01bbad6dfa09777e102b7d5ee6f462fd833862f271b721427c86842f1441b57257c54683fe1e4fdf51e678302fdbfc75f02f998277a18a2a5191b2640b74a", 0xf5}, {&(0x7f00000004c0)="3021de82c3875f60338df1c075f36c7494d5bd6fdc6964348510953d087e3217e96e951e314cb56f74ee5ba54757f04ecae2986243402b357fe05728a5333d9018787fd862775cd3f45785cb101fec924a2409287fbd3453f3ac8d7be3b1c772b4d0f33321b4b18210efc6e5c0b1f1629fa82bda8eea3841376e5476458c6f366f439499d28da41d860963cbe383934713b122da3b425e0b9063b8ce902997e687c66965b7f347ef31c7fe7b8d12b16a35ef01794e0282d80fd634142bb46b1f4cb7feb6033761dfbc92c9915a9dd292bebdb2d696", 0xd5}], 0x6, &(0x7f0000002cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}], 0x1, 0x0) 08:51:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8982, 0x0) 08:51:09 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 08:51:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 581.615695][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:09 executing program 2: bpf$PROG_LOAD(0xf, 0x0, 0x0) 08:51:09 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:09 executing program 3: r0 = socket(0x25, 0x1, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={0x0}}, 0x0) [ 581.705292][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 581.716761][ T3925] loop1: p2 < > 08:51:09 executing program 5: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000006c0)="be", 0x1) 08:51:09 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) 08:51:09 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x16, r1, 0x0, 0x0) 08:51:09 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 08:51:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000054c0)=[{{&(0x7f0000002340)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000004700)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000005000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast}}}], 0x20}}], 0x2, 0x0) 08:51:09 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x802c542a, 0x0) 08:51:09 executing program 2: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8940, &(0x7f0000000000)={'bond_slave_1\x00'}) 08:51:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 08:51:09 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto(r0, 0x0, 0x0, 0x20060cc7, &(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x80) 08:51:09 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xfffffff7}, 0x8) 08:51:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x600, r1}) 08:51:09 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000080)=[{&(0x7f0000000000)={0xa, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, "c7fe52deafffd3b4d81af3a5fb051a3ab9c81ebf0759fe929a0adb4000000092476a128f84f48f13349b229616b17fe7bc4268fb901699facae800"}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000440)="1e", 0x1}], 0x1}], 0x1, 0x4008ddd) 08:51:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0xb, r1, 0x0, 0x0) 08:51:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20}], 0x1, 0x0) 08:51:09 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) [ 582.277922][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 582.311180][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 582.352041][ T3925] loop1: p2 < > 08:51:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@empty, @private1, @loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2800022}) 08:51:09 executing program 1: r0 = socket(0x15, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x107, 0x9, 0x0, 0x300) 08:51:10 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x80045432, 0x0) 08:51:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x859, 0x1, 0x0, "80ae483cd0325a91ab9e33c91fede44c4c29c0f8a13710f9de5a5d3a3d088c7e"}) 08:51:10 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0x100, 0x6, 0x7ff, 0x10001, 0x94}) r0 = getpid() ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x0, 0x122) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x0, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="e958415e09a4107373c4348ba2d79f1fe05fea085e84a0af812633ed2013e39a0bac3cecc6ac4582df7986353103dd0d7c124c9fb9ad3d4d41adfd42857952fa59869cf8d98220e7311701c4ef37b9cedb66af1409479236f611cf0dcaaebc5f57a3f75ca4ba81ce1b6f35cd6e6d62b6ccd021a4c773f5b124d4c0585b0231623fb84cfa7561a4b7617b00bf8135cc43dfe4b8821a8a151dc154d1c1", 0x9c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8db, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x163, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xe, r2, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r3 = getpid() r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x400800, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = getpid() rt_tgsigqueueinfo(r3, r5, 0x16, &(0x7f0000000000)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:51:10 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:10 executing program 4: r0 = socket$kcm(0x10, 0x804000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="2e0000001a008100a00080ecdb4cb904024865160b000000d4126efb12001d403a000020e2000000180000000000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0, 0x2}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x3}, 0x0) 08:51:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "dfaf02943cf9fdf6de35dfb35a0f98b2e28b91c7731fd756e1eb463acc040926"}) 08:51:10 executing program 5: keyctl$restrict_keyring(0xb, 0x0, 0x0, 0x0) 08:51:10 executing program 2: r0 = socket(0xa, 0x3, 0x2) bind$ax25(r0, 0x0, 0x0) [ 582.757160][T20634] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 582.796600][T20634] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 582.852339][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:10 executing program 3: write$sndseq(0xffffffffffffffff, 0x0, 0x0) 08:51:10 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011500)) [ 582.896459][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:51:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5411, 0x0) [ 582.949341][ T3925] loop1: p2 < > 08:51:10 executing program 5: r0 = socket(0x11, 0x80002, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 08:51:10 executing program 2: r0 = socket(0xa, 0x3, 0xb) bind$rxrpc(r0, 0x0, 0x0) 08:51:10 executing program 3: keyctl$dh_compute(0xd, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:51:10 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0x100, 0x6, 0x7ff, 0x10001, 0x94}) r0 = getpid() ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x0, 0x122) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x0, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="e958415e09a4107373c4348ba2d79f1fe05fea085e84a0af812633ed2013e39a0bac3cecc6ac4582df7986353103dd0d7c124c9fb9ad3d4d41adfd42857952fa59869cf8d98220e7311701c4ef37b9cedb66af1409479236f611cf0dcaaebc5f57a3f75ca4ba81ce1b6f35cd6e6d62b6ccd021a4c773f5b124d4c0585b0231623fb84cfa7561a4b7617b00bf8135cc43dfe4b8821a8a151dc154d1c1", 0x9c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8db, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x163, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xe, r2, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000b400000bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000ffffff112e460500000000007502faff07cd02020404000009007d60b7030000001000006a0a00fe000000008500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbce596c6d89ef05c0663c2c9ff215ac60c2ceaea4c0ec908abb6e7325ed1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd17817057212db6d89e078da9144ce8734ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5ca0b6c00000000000080f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768a162ab41d0cb06000000000000004c03e53466fa4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee5d605bb32935f542127a8f000000000000f00699f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769643bed96ec86ad73f77f0e2aeee2b703c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70829d44ea4e4d0599a76519205b0fa80cce69df304b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbcb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45577c205070031e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1ed68324a25df14010c8ed6b8c97c00eac0e451ac4544d3a7c86fe09b404e0b7c723d3bfdc339e93583d7134b589f3f1329cbe9c7af24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca7dce34c41aec7aa86e596119109ea8b3fcff01643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc7eafb613313b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b3a464803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535e87dbdeb0dcca5303eedde47e6672e93a314a5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf34b2d825d192ade90a1162acfe9749d516d014cef783620cf585cf3acc85808c4d69e5749901b09e4902a6f5addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0af212b6cb55b9c207ba0479a9775940f6e1837375dd2adec15be08f483b1bea05f41b9a1d3af087047c568ae6ebf070000c30b6290dc757a4903938fb2c035b2349b6d2f0c051b8b775152786118384eebd5fc19928ceb713ff09e179c308fbe9bc54374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1000000000a88de7596429a20793e12616aa32b3e720c6521fbe93963e22bd2a9b03956afea7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30923bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c956847bc03d10411ac6eec9a3ecd9e3c325fcabbab3d129c0cced3ce11dafa387a8077db8a00000032fabc643bcb9c42c0ab1eef5f989c207eb1f160cbcb92968fb40b1f9a37ef19551dff7f837d37aabf30d2e9a8e5b0df5daa78dabc1000785b6f8319e3edb4d2d661560c73c95b0f4e2e1e07d61e43859d08366f52a2c8f5f34b0fdda9586728b417bfd9d325aa2a6770bf3753e99b1f0ef865f1ae377e8c084a46888ca3a71b5815d9d22c56bc8e967b1c04577e736c0a2cdcc0f3c605d80d7e2e9aaf78d9ece3986a1b0481c19a8e9008769b3159426f5be7b300004e341f4e74370e0000000000000000009405649a683c6a338b61095a9ec70000f665bf232282a23f080000bae1c88b136ccc05e034834ca06479271a846f82e797c0020385043e4e142e7b1242eee8655684c654ade7ed810feac9b9428ea238cd4835f6dbe8cbcd023b16879d240c641df07b4b06bff89bfbb399f136456579b8170b6c000000000000000000daa426da3dd1d3958b608ebcfa0045a2c464e00ff15a7108eca8deb58a39bec62dda7fa6bbe1d808d242d0c96d06951dca1abbf50eb945b9b24cc451d0cb27de09d2dd4fa8e90e1b953c91691332a7cfcedf4708eec12fc21e6fd4f6682ee64b500adccbb96c52b881ed0bbd96e494795745ce03f0a0720490787f35aa7f092c16c590cfd8bd35ce08f8287e5e0d799d3a53b7be1b1edca2e522fcf55c013bd4c94c6a7ea153c8d1ad8b211768db3d00206884c5da7b0e85fd59678d2805adaeeb8f9e5520052d4d8077d384f32e00000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r3 = getpid() r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x400800, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = getpid() rt_tgsigqueueinfo(r3, r5, 0x16, &(0x7f0000000000)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:51:10 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011500)) 08:51:10 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="fb", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) 08:51:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x4, {0x2, 0x0, @empty}, 'wg1\x00'}) 08:51:10 executing program 5: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffe) 08:51:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000140)) 08:51:11 executing program 2: r0 = socket(0xa, 0x3, 0x6) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@bcast, @bcast, 0x0, [@bcast, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) 08:51:11 executing program 5: syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x0, 0x127a00) 08:51:11 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011500)) 08:51:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000008280)=ANY=[@ANYBLOB="c4080000", @ANYRES16, @ANYBLOB="04"], 0x8c4}}, 0x0) 08:51:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x5450, 0x0) 08:51:11 executing program 2: recvfrom$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:11 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0x100, 0x6, 0x7ff, 0x10001, 0x94}) r0 = getpid() ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x0, 0x122) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x0, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="e958415e09a4107373c4348ba2d79f1fe05fea085e84a0af812633ed2013e39a0bac3cecc6ac4582df7986353103dd0d7c124c9fb9ad3d4d41adfd42857952fa59869cf8d98220e7311701c4ef37b9cedb66af1409479236f611cf0dcaaebc5f57a3f75ca4ba81ce1b6f35cd6e6d62b6ccd021a4c773f5b124d4c0585b0231623fb84cfa7561a4b7617b00bf8135cc43dfe4b8821a8a151dc154d1c1", 0x9c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8db, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x163, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xe, r2, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r3 = getpid() r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x400800, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = getpid() rt_tgsigqueueinfo(r3, r5, 0x16, &(0x7f0000000000)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:51:11 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000001c0)) 08:51:11 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)) 08:51:11 executing program 4: r0 = io_uring_setup(0x317, &(0x7f0000000040)={0x0, 0x0, 0x2}) io_uring_setup(0x1929, &(0x7f0000000240)={0x0, 0x0, 0x36, 0x0, 0x0, 0x0, r0}) 08:51:11 executing program 3: keyctl$dh_compute(0x16, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:51:11 executing program 2: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) [ 584.296622][T20703] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:11 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5433, 0x0) [ 584.339603][T20703] REISERFS (device loop0): using ordered data mode [ 584.371773][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 584.373896][T20703] reiserfs: using flush barriers 08:51:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8916, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 08:51:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic}) [ 584.434591][T20703] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600}) [ 584.487631][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 584.494624][ T3925] loop1: p2 < > [ 584.556406][T20703] REISERFS (device loop0): checking transaction log (loop0) [ 584.605010][T20703] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:12 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0) 08:51:12 executing program 5: keyctl$restrict_keyring(0x14, 0x0, 0x0, 0x0) [ 584.720583][T20703] REISERFS (device loop0): Using rupasov hash to sort names 08:51:12 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000005cc0)={0x2020}, 0x2020) 08:51:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80) 08:51:12 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)) 08:51:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454dc, 0x0) 08:51:12 executing program 5: r0 = socket(0x10, 0x3, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x6c}}, 0x0) 08:51:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8008551c, 0x0) 08:51:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x2001006f) 08:51:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 08:51:12 executing program 2: keyctl$dh_compute(0x10, &(0x7f00000000c0), 0xfffffffffffffffd, 0x0, 0x0) 08:51:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x85, 0x0, 0x0, 0x0) 08:51:12 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 585.263694][T20760] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:12 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 585.324697][T20760] REISERFS (device loop0): using ordered data mode [ 585.341179][T20760] reiserfs: using flush barriers [ 585.354387][T20760] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:12 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_dev$char_raw(&(0x7f0000000080)='/dev/raw/raw#\x00', 0x0, 0x80002) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x20000400) ioctl$CHAR_RAW_SECTGET(r0, 0x1267, 0x0) ioctl$CHAR_RAW_ROGET(0xffffffffffffffff, 0x125e, 0x0) [ 585.380025][T20760] REISERFS (device loop0): checking transaction log (loop0) [ 585.392623][T20760] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 585.446675][T20760] REISERFS (device loop0): Using rupasov hash to sort names [ 585.446891][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:13 executing program 2: r0 = socket(0x2, 0x3, 0x1) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 585.533819][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 585.550017][ T3925] loop1: p2 < > 08:51:13 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)) 08:51:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x2) 08:51:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x4279, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}}}) 08:51:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x6c}, 0x1, 0x400000, 0x2}, 0x0) 08:51:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, 0x0) 08:51:13 executing program 4: keyctl$restrict_keyring(0x2, 0x0, 0x0, 0x0) 08:51:13 executing program 3: keyctl$dh_compute(0x13, 0x0, 0xfffffffffffffffd, 0x0, 0x0) [ 585.818640][T20796] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 585.858674][T20796] REISERFS (device loop0): using ordered data mode [ 585.888338][T20796] reiserfs: using flush barriers [ 585.918703][T20796] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 586.059980][T20796] REISERFS (device loop0): checking transaction log (loop0) 08:51:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) 08:51:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x0, 0x0, "b552a9dc7c0d790f4ec2812d1975e7682b6f8dac3fe4e2a2"}) 08:51:13 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2000000002, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "54353da6"}, 0x0, 0x0, @planes=0x0}) 08:51:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {}, 0x4, {0x2, 0x0, @private}, 'ipvlan1\x00'}) 08:51:13 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x4, r1, 0x0, 0x0) [ 586.101334][T20796] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 586.120867][T20796] REISERFS (device loop0): Using rupasov hash to sort names 08:51:13 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {0x0, 0x0, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x401870cb, 0x0) 08:51:13 executing program 2: r0 = inotify_init() ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:51:13 executing program 1: r0 = syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x26000}], 0x1, 0x0, 0x0) 08:51:14 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5427, 0x0) 08:51:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x12, 0x0, 0x0) 08:51:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000002340)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) [ 586.569457][T20826] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 586.593224][T20826] REISERFS (device loop0): using ordered data mode [ 586.605867][T20826] reiserfs: using flush barriers [ 586.615338][T20826] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 586.659539][T20826] REISERFS (device loop0): checking transaction log (loop0) 08:51:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 08:51:14 executing program 3: keyctl$restrict_keyring(0xe, 0x0, 0x0, 0x0) 08:51:14 executing program 4: r0 = socket(0x2, 0x3, 0x7) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) [ 586.682150][T20826] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 586.701908][T20826] REISERFS (device loop0): Using rupasov hash to sort names 08:51:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4000) 08:51:14 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {0x0, 0x0, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:14 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x5, r1, 0x0, 0x0) 08:51:14 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) 08:51:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4a22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}}], 0x2, 0x0) 08:51:14 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) 08:51:14 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xff00) 08:51:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 587.061126][T20849] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 587.084855][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 587.098861][T20849] REISERFS (device loop0): using ordered data mode [ 587.168244][T20849] reiserfs: using flush barriers [ 587.183562][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:51:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5421, 0x0) [ 587.210960][T20849] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 587.224902][ T3925] loop1: p2 < > 08:51:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) 08:51:14 executing program 2: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001c00)={'wg2\x00'}) 08:51:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@bridge_delvlan={0x18, 0x71, 0x1}, 0x18}}, 0x0) 08:51:14 executing program 4: gettid() [ 587.304006][T20849] REISERFS (device loop0): checking transaction log (loop0) [ 587.367420][T20849] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 587.438258][T20849] REISERFS (device loop0): Using rupasov hash to sort names 08:51:15 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {0x0, 0x0, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:15 executing program 3: r0 = socket(0xa, 0x2, 0x0) bind$rxrpc(r0, 0x0, 0x0) 08:51:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x125d, 0x7fffffffefff) 08:51:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007f80)=[{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1, &(0x7f0000002540)=ANY=[@ANYBLOB="1c0000000000000001"], 0xa0}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) 08:51:15 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)={0x1}) 08:51:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@report={0x4c, 0x20, 0x1, 0x0, 0x0, {0x0, {@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x4c}}, 0x0) 08:51:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 587.670838][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:15 executing program 3: r0 = socket(0xf, 0x3, 0x2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xc081) [ 587.734996][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 587.765492][T20889] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 587.775624][ T3925] loop1: p2 < > 08:51:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 08:51:15 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) [ 587.782103][T20889] REISERFS (device loop0): using ordered data mode [ 587.796230][T20889] reiserfs: using flush barriers [ 587.815702][T20889] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:15 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x541a, 0x0) 08:51:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="14", 0x1, 0x20004800, &(0x7f0000000100)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) [ 587.948752][T20889] REISERFS (device loop0): checking transaction log (loop0) [ 588.009545][T20889] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 588.075605][T20889] REISERFS (device loop0): Using rupasov hash to sort names 08:51:15 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300), 0x0, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 08:51:15 executing program 2: keyctl$negate(0xd, 0x0, 0x0, 0xffffffffffffffff) 08:51:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) 08:51:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[], 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./bus\x00') setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='security.capability\x00', 0x0, 0x0, 0x0) 08:51:15 executing program 4: munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 588.170530][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 588.181672][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 588.195314][ T3925] loop1: p2 < > 08:51:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 08:51:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x210005a1) 08:51:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000700)=""/4096, 0x0, 0x800}, 0x20) 08:51:16 executing program 5: r0 = socket(0x29, 0x5, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 588.412588][T20918] overlayfs: failed to resolve './bus': -2 [ 588.429373][T20926] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000040)) [ 588.479023][T20926] REISERFS (device loop0): using ordered data mode [ 588.526968][T20926] reiserfs: using flush barriers 08:51:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4040ae77, 0x0) [ 588.590448][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 588.619862][T20926] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 588.676047][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 588.705405][ T3925] loop1: p2 < > [ 588.719396][T20926] REISERFS (device loop0): checking transaction log (loop0) [ 588.756461][T20926] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 588.784705][T20926] REISERFS (device loop0): Using rupasov hash to sort names 08:51:16 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300), 0x0, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:16 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)) 08:51:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000540)={&(0x7f0000000480), 0x18, &(0x7f0000000500)={0x0}}, 0x0) 08:51:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x125e, 0x0) 08:51:16 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) 08:51:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1e, r1, 0x0, 0x0) 08:51:16 executing program 5: r0 = socket(0x2a, 0x2, 0x0) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) 08:51:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0045878, 0x0) 08:51:16 executing program 3: r0 = socket(0x2, 0x3, 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 08:51:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x8, 0x0, "b552a9dc7c0d790f4ec2812d1975e7682b6f8dac3fe4e2a2"}) 08:51:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002500c5"], 0x30}}, 0x0) [ 589.185748][T20967] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 589.210882][T20967] REISERFS (device loop0): using ordered data mode [ 589.217971][T20967] reiserfs: using flush barriers 08:51:16 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$can_bcm(r0, 0x0, 0x0) [ 589.225282][T20967] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 589.251121][T20967] REISERFS (device loop0): checking transaction log (loop0) [ 589.264036][T20967] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 589.280821][T20967] REISERFS (device loop0): Using rupasov hash to sort names [ 589.342936][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:51:17 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300), 0x0, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}}}) 08:51:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:17 executing program 2: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:17 executing program 4: r0 = socket(0xf, 0x3, 0x2) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:17 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x540d, 0x0) [ 589.583024][T20989] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 589.602003][T20989] REISERFS (device loop0): using ordered data mode [ 589.613302][T20989] reiserfs: using flush barriers [ 589.621080][T20989] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 589.645621][T20989] REISERFS (device loop0): checking transaction log (loop0) [ 589.656122][T20989] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 589.675039][T20989] REISERFS (device loop0): Using rupasov hash to sort names 08:51:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}], 0x1, 0x0) 08:51:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @local}, @ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6d68e2932ff18af}) 08:51:17 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$packet_add_memb(r0, 0x6, 0x1, 0x0, 0x0) 08:51:17 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001", 0x1d, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:17 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x0) accept$nfc_llcp(r0, 0x0, 0x0) 08:51:17 executing program 5: pipe2$9p(0x0, 0x1000) 08:51:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) [ 590.132077][T21013] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 590.161388][T21013] REISERFS (device loop0): using ordered data mode [ 590.209087][T21013] reiserfs: using flush barriers [ 590.275869][T21013] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 590.355468][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 590.387802][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 590.394859][ T3925] loop1: p2 < > 08:51:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000008000000950000000000000018000000020000000000000081ffffff11b90000f0ffffff04880300000000003447c0ff040000009500000000000000182300", @ANYRES32, @ANYBLOB='\x00\b'], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x89, &(0x7f00000002c0)=""/137, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:18 executing program 3: socketpair(0x1e, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 08:51:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x711}, 0x18}}, 0x0) 08:51:18 executing program 5: clone3(&(0x7f0000000240)={0x28121500, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58) [ 590.441995][T21013] REISERFS (device loop0): checking transaction log (loop0) [ 590.516475][T21013] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) [ 590.598553][T21013] REISERFS (device loop0): Using rupasov hash to sort names 08:51:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x80041285, 0x0) [ 590.656637][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 590.687130][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 590.708033][ T3925] loop1: p2 < > 08:51:18 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001", 0x1d, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7f, 0x1, 0x0, "d70275b2b5cb3bff19974d820f61e31b3e260ba8f0dd9e54380e4bac95688783"}) 08:51:18 executing program 4: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003040)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 08:51:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d0, 0x0) 08:51:18 executing program 2: r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 08:51:18 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:18 executing program 5: r0 = socket$kcm(0x10, 0x804000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="2e0000001a008100a00080ecdb4cb904024865160b000000d4126efb12001d403a000020e2000000180000000000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x2}, {0x0}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x3}, 0x0) 08:51:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xc, 0x0, 0x0) 08:51:18 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$packet_add_memb(r0, 0x84, 0x1, 0x0, 0x0) [ 591.023335][T21063] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 591.039872][T21063] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 591.049760][T21059] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 591.074564][T21059] REISERFS (device loop0): using ordered data mode [ 591.103003][T21059] reiserfs: using flush barriers 08:51:18 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xfffffffffffffffa, 0x167241) 08:51:18 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x3}) [ 591.110798][T21059] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 591.159764][T21059] REISERFS (device loop0): checking transaction log (loop0) 08:51:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "d70275b2b5cb3bff19974d820f61e31b3e260ba8f0dd9e54380e4bac95688783"}) [ 591.233735][T21059] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 591.341830][T21059] REISERFS (device loop0): Using rupasov hash to sort names 08:51:19 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001", 0x1d, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:19 executing program 3: read$midi(0xffffffffffffffff, 0x0, 0x0) 08:51:19 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) [ 591.705227][T21087] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 591.738304][T21087] REISERFS (device loop0): using ordered data mode [ 591.775243][T21087] reiserfs: using flush barriers 08:51:19 executing program 2: r0 = socket$kcm(0x10, 0x804000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="2e0000001a008100a00080ecdb4cb904024865160b000000d4126efb12001d403a000020e2000000180000000000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 08:51:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454df, 0x0) 08:51:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 08:51:19 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:19 executing program 5: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x3, 0x4, 0x0) [ 591.851860][T21087] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 591.946917][T21087] REISERFS (device loop0): checking transaction log (loop0) [ 591.955409][T21087] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 591.973147][T21087] REISERFS (device loop0): Using rupasov hash to sort names 08:51:19 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000", 0x2b, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:19 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:19 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000001680)='/dev/midi#\x00', 0x2000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) [ 592.051729][T21110] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 08:51:19 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 08:51:19 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$qrtr(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x38, 0x0) [ 592.126229][T21110] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 08:51:19 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000005cc0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 08:51:19 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x24}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000008280)=ANY=[@ANYBLOB="c4080000", @ANYRES16, @ANYBLOB="04"], 0x8c4}}, 0x0) 08:51:19 executing program 4: r0 = socket(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x64}}, 0x0) [ 592.311245][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 592.322498][T21122] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 592.347338][T21122] REISERFS (device loop0): using ordered data mode [ 592.365764][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 592.370908][T21122] reiserfs: using flush barriers [ 592.396531][T21122] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 592.410091][ T3925] loop1: p2 < > 08:51:20 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1}, 0x40000061) [ 592.426615][T21122] REISERFS (device loop0): checking transaction log (loop0) 08:51:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) [ 592.476855][T21122] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 592.562618][T21122] REISERFS (device loop0): Using rupasov hash to sort names 08:51:20 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000", 0x2b, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:20 executing program 4: r0 = syz_io_uring_setup(0x4fdf, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/108, 0x6c}], 0x1) 08:51:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x40101283, 0x0) 08:51:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:20 executing program 3: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) 08:51:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000300)) 08:51:20 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f00000019c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/224, 0xe0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) [ 592.936367][T21163] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @private=0xa010101}, 0x10) 08:51:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 592.983794][T21163] REISERFS (device loop0): using ordered data mode [ 593.030895][T21163] reiserfs: using flush barriers 08:51:20 executing program 1: syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x3}) [ 593.067822][T21163] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 593.143819][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 593.189584][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 593.216951][T21163] REISERFS (device loop0): checking transaction log (loop0) [ 593.224910][ T3925] loop1: p2 < > [ 593.232307][T21163] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 593.271327][T21163] REISERFS (device loop0): Using rupasov hash to sort names 08:51:20 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000", 0x2b, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18}], 0x1, 0x0) 08:51:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000000c0)="2df45b1b33c99e64ac069550a55ee195", 0x10) 08:51:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000180)={'dummy0\x00', @ifru_names}) 08:51:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x43, 0xfffffffe}, 0x40) 08:51:20 executing program 1: syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:21 executing program 1: syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x3}) 08:51:21 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0x0, 0x0}) 08:51:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x800454dd, 0x0) 08:51:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) [ 593.631430][T21197] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 593.665008][T21197] REISERFS (device loop0): using ordered data mode 08:51:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, 0x0) [ 593.706938][T21197] reiserfs: using flush barriers [ 593.747026][T21208] kcapi: manufacturer command 0 unknown. [ 593.761391][T21197] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 593.863331][T21197] REISERFS (device loop0): checking transaction log (loop0) [ 593.882075][T21197] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 593.901230][T21197] REISERFS (device loop0): Using rupasov hash to sort names 08:51:21 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e0000000000", 0x32, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:21 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, 0x0) 08:51:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x3c}, {0x6}]}) 08:51:21 executing program 4: keyctl$restrict_keyring(0xe, 0xffffffffffffffff, 0x0, 0x0) 08:51:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4) 08:51:21 executing program 4: r0 = fanotify_init(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 08:51:21 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5416, 0x0) 08:51:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, 0x0) [ 594.201140][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 594.211874][T21230] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 594.227807][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 594.242088][ T28] audit: type=1326 audit(1601369481.788:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21216 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 [ 594.249001][T21230] REISERFS (device loop0): using ordered data mode [ 594.270924][T21230] reiserfs: using flush barriers [ 594.272475][ T3925] loop1: p2 < > [ 594.280525][T21230] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 594.315806][T21230] REISERFS (device loop0): checking transaction log (loop0) 08:51:21 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x178001b4) [ 594.354927][T21230] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000140)={'tunl0\x00', 0x0}) [ 594.424584][T21230] REISERFS (device loop0): Using rupasov hash to sort names 08:51:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)) 08:51:22 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e0000000000", 0x32, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:22 executing program 3: syz_genetlink_get_family_id$l2tp(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 594.760870][T21255] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 594.788112][T21255] REISERFS (device loop0): using ordered data mode [ 594.802280][T21255] reiserfs: using flush barriers [ 594.814286][T21255] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 594.840058][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 594.843831][T21255] REISERFS (device loop0): checking transaction log (loop0) [ 594.852494][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 594.868661][ T3925] loop1: p2 < > [ 594.878188][ T28] audit: type=1326 audit(1601369482.428:46): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21216 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 08:51:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@void, @val, @ipv4=@udp={{0x15, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast2, {[@cipso={0x86, 0x6}, @generic={0x0, 0x11, "cbe3ce71d850cc33e20d9df6d843a4"}, @cipso={0x86, 0x23, 0x0, [{0x0, 0x2}, {0x0, 0xd, "9cd9e5dd6638367eee1481"}, {0x0, 0xb, "ad1e7a4c8c02162e6b"}, {0x0, 0x3, "c8"}]}, @ssrr={0x89, 0x3}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4f20a24eacc64669961e22c6c57d36cdefb01cfd25c3a7377d66390364375198", "0219549d13573999838aa0a6931ffe8f0e2945f99c5e04eb0abab526118ecbe74b544f84071ba6ae1a81caaba1075d89", "3bdcebb2c35f15a8ef587ab6c7e4a917768b1a16a662aec925f85aaa", {"a2c2a9b5445a90200c12988731b4ec2d", "7aa0447a77cb60b8e96d075c17760987"}}}}}, 0xfa) 08:51:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)) 08:51:22 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:51:22 executing program 4: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) 08:51:22 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f0000000180)) [ 594.972513][T21255] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)) [ 595.052701][T21255] REISERFS (device loop0): Using rupasov hash to sort names 08:51:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x81}, {0x3}, {0x6}]}) 08:51:22 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x545d, 0x0) 08:51:22 executing program 3: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x7ffffffff000, 0x0, 0x0) 08:51:22 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e0000000000", 0x32, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:22 executing program 5: request_key(&(0x7f0000001800)='logon\x00', &(0x7f0000001840)={'syz', 0x1}, &(0x7f0000001880)='.dead\x00', 0xfffffffffffffffd) [ 595.265137][ T28] audit: type=1326 audit(1601369482.808:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21278 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 08:51:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5450, 0x0) 08:51:22 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f00000002c0)=ANY=[]) 08:51:23 executing program 3: r0 = socket(0x15, 0x5, 0x0) connect$packet(r0, 0x0, 0x0) 08:51:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@void, @val, @ipv4=@udp={{0x15, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast2, {[@cipso={0x86, 0x6}, @generic={0x0, 0x11, "cbe3ce71d850cc33e20d9df6d843a4"}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x2}, {0x0, 0xd, "9cd9e5dd6638367eee1481"}, {0x0, 0xb, "ad1e7a4c8c02162e6b"}, {0x0, 0x4, "c89f"}]}, @generic={0x0, 0x2}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4f20a24eacc64669961e22c6c57d36cdefb01cfd25c3a7377d66390364375198", "0219549d13573999838aa0a6931ffe8f0e2945f99c5e04eb0abab526118ecbe74b544f84071ba6ae1a81caaba1075d89", "3bdcebb2c35f15a8ef587ab6c7e4a917768b1a16a662aec925f85aaa", {"a2c2a9b5445a90200c12988731b4ec2d", "7aa0447a77cb60b8e96d075c17760987"}}}}}, 0xfa) [ 595.459521][T21298] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 595.480281][T21298] REISERFS (device loop0): using ordered data mode 08:51:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000500)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x2, {0x2, @raw_data="2eb0e570961f279c8a1530c39ca65316dcb6b35c5e98aa653ce983fc53f04bc63409081665ea71f30661283141cb1294e7516fc5228cfd0c45b58fa8a4b258614cb61300f6ed0e98c966d02ca8cd955810d9235d7d0253c10d8ce20b202cee4f8f499b2cb6ab9ef493de1e13d3c5d428cf6d1c87cd259e024e7eec8d75bee7a5255fda0129958a35de94fbe30564d7cc7b5c42e0f740e912a4087a089ff10cd08d9d58fb8c14a0c593cbec0a5e54a156140c11c5face7dcd550af1be4bffc86c69a529ca47bd8b11"}}) [ 595.512499][T21298] reiserfs: using flush barriers 08:51:23 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5441, 0x0) [ 595.551859][T21302] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 595.561870][T21298] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x81}, {0x6}]}) [ 595.612774][T21298] REISERFS (device loop0): checking transaction log (loop0) [ 595.623405][T21298] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 595.650575][T21298] REISERFS (device loop0): Using rupasov hash to sort names [ 595.746481][ T28] audit: type=1326 audit(1601369483.288:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21313 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 [ 595.868721][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 595.879036][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 595.886041][ T3925] loop1: p2 < > [ 596.043652][ T28] audit: type=1326 audit(1601369483.588:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21278 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 08:51:23 executing program 5: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x9, 0x4, 0x0) 08:51:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f00000002c0)=ANY=[]) 08:51:23 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41", 0x36, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:23 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)) 08:51:23 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/hwrng\x00', 0x80402, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x1929, &(0x7f0000000240)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x3, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x5080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r5 = socket(0x11, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="601a0000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800cdf50000000014000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x1a60}, 0x1, 0x0, 0x0, 0x20008045}, 0x8001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001f00)={'ip6gre0\x00', &(0x7f0000001e80)={'syztnl1\x00', r7, 0x29, 0xfc, 0x1f, 0x101, 0x0, @remote, @remote, 0x80, 0x8000, 0x5e0, 0x3ff}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x107, 0x9, 0x0, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0xe9, 0x1, 0x5, 0xb, @private0, @ipv4={[], [], @rand_addr=0x64010101}, 0x10, 0x7800, 0x2, 0xb07}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xc2}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffff5a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000004) [ 596.203202][T21332] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in, 0x80) [ 596.263342][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 596.289252][T21332] REISERFS (device loop0): using ordered data mode [ 596.329236][T21332] reiserfs: using flush barriers [ 596.337072][T21345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 596.361523][T21332] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 596.384417][T21332] REISERFS (device loop0): checking transaction log (loop0) [ 596.394616][T21332] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 596.397158][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 596.412293][T21332] REISERFS (device loop0): Using rupasov hash to sort names 08:51:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4040ae77, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 08:51:24 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x492492492492494, 0x0) 08:51:24 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/hwrng\x00', 0x80402, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x1929, &(0x7f0000000240)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x3, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x5080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r5 = socket(0x11, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="601a0000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800cdf50000000014000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x1a60}, 0x1, 0x0, 0x0, 0x20008045}, 0x8001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001f00)={'ip6gre0\x00', &(0x7f0000001e80)={'syztnl1\x00', r7, 0x29, 0xfc, 0x1f, 0x101, 0x0, @remote, @remote, 0x80, 0x8000, 0x5e0, 0x3ff}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x107, 0x9, 0x0, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0xe9, 0x1, 0x5, 0xb, @private0, @ipv4={[], [], @rand_addr=0x64010101}, 0x10, 0x7800, 0x2, 0xb07}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xc2}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffff5a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000004) 08:51:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f00000023c0)={@void, @void, @mpls={[{0x6, 0x0, 0x1}], @ipv6=@icmpv6={0x0, 0x6, "d2c03b", 0xf9e, 0x3a, 0x0, @private1, @ipv4={[], [], @dev}, {[], @ndisc_rs={0x85, 0x0, 0x0, [], [{0x0, 0x1f2, "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"}]}}}}}, 0xfca) [ 596.537187][ T28] audit: type=1326 audit(1601369484.088:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21313 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 [ 596.565244][ T3925] loop1: p2 < > 08:51:24 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5456, 0x0) 08:51:24 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41", 0x36, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:24 executing program 4: request_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0) 08:51:24 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/hwrng\x00', 0x80402, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x1929, &(0x7f0000000240)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x3, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x5080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r5 = socket(0x11, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="601a0000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800cdf50000000014000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x1a60}, 0x1, 0x0, 0x0, 0x20008045}, 0x8001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001f00)={'ip6gre0\x00', &(0x7f0000001e80)={'syztnl1\x00', r7, 0x29, 0xfc, 0x1f, 0x101, 0x0, @remote, @remote, 0x80, 0x8000, 0x5e0, 0x3ff}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x107, 0x9, 0x0, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0xe9, 0x1, 0x5, 0xb, @private0, @ipv4={[], [], @rand_addr=0x64010101}, 0x10, 0x7800, 0x2, 0xb07}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xc2}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffff5a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000004) 08:51:24 executing program 5: mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 08:51:24 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 08:51:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) [ 596.920664][T21391] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 596.933121][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 596.944189][T21391] REISERFS (device loop0): using ordered data mode [ 596.951536][T21391] reiserfs: using flush barriers [ 596.957351][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 596.967179][T21391] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 596.984030][ T3925] loop1: p2 < > 08:51:24 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) [ 597.053159][T21391] REISERFS (device loop0): checking transaction log (loop0) [ 597.064339][T21391] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:24 executing program 5: socket(0xa, 0x3, 0x0) 08:51:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f0000000140)) 08:51:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r0, 0x0, 0x0, 0x80c00) [ 597.114220][T21391] REISERFS (device loop0): Using rupasov hash to sort names 08:51:24 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/hwrng\x00', 0x80402, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x1929, &(0x7f0000000240)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x3, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x5080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r5 = socket(0x11, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="601a0000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800cdf50000000014000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x1a60}, 0x1, 0x0, 0x0, 0x20008045}, 0x8001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001f00)={'ip6gre0\x00', &(0x7f0000001e80)={'syztnl1\x00', r7, 0x29, 0xfc, 0x1f, 0x101, 0x0, @remote, @remote, 0x80, 0x8000, 0x5e0, 0x3ff}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x107, 0x9, 0x0, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0xe9, 0x1, 0x5, 0xb, @private0, @ipv4={[], [], @rand_addr=0x64010101}, 0x10, 0x7800, 0x2, 0xb07}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xc2}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffff5a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000004) 08:51:24 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41", 0x36, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x3, @win={{}, 0x2, 0x0, 0x0, 0x0, 0x0}}) 08:51:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7006, 0x0) 08:51:24 executing program 2: r0 = socket(0xa, 0x3, 0xb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, 0x0, 0x8) 08:51:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 08:51:25 executing program 5: keyctl$dh_compute(0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 08:51:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 597.521138][T21433] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 597.544256][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 597.560580][T21433] REISERFS (device loop0): using ordered data mode [ 597.575950][T21433] reiserfs: using flush barriers [ 597.582508][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 597.598846][T21433] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 597.608140][ T3925] loop1: p2 < > 08:51:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x77762b39ba66e75d, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000000000a3c63fa596d96c30c9b48cf8b325b7639a9cc68c41372a4992b100000000008aaf68dbd389ac8101fd3fbe2134730d12190b7c0aadb00090fba64cd586f8a4504d720000000000000000000000601f98b745205f628880b41f1a35dd60bde949474ce22990d6ff66fba0e683aefea9632db335ab02254066d1c518825ad5cebc6dc426b3345919f66c424d3634023ba7eec963c8c3edd72484e39c1205cd7f6ae64bdf95f478b1f5ff4dd6b1ae331e435cdf00", @ANYRES32=r5, @ANYBLOB="8000070000000008000000074b82006c00650000022f9078ac1e0001ac1414aa071797e000000100000000ac1e0101e00000026401010000441c96b37f000001000000047f00000100000008ffffffff0000000894040100891b88ac141444e0000002e00000010a01010164010102e00000029404010000"]}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000580)={@ipv4={[], [], @multicast2}, 0x6e, r4}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="67726520000000a3f8b325b7639ac68c01372a4992b100000000008aaf68dbd389ac8101fd3fbe2134730d12190b7c0aadb000"/70, @ANYRES32=r7, @ANYBLOB="8000070000000008000000074b82006c00650000022f9078ac1e0001ac1414aa071797e000000100000000ac1e0101e00000026401010000441c96b37f000001000000047f00000100000008ffffffff0000000894040100891b88ac141444e0000002e00000010a01010164010102e00000029404010000"]}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="67726520000000a3f8b325b7639ac68c01372a4992b100000000008aaf68dbd389ac8101fd3fbe2134730d12190b7c0aadb000"/70, @ANYRES32=r8, @ANYBLOB="8000070000000008000000074b82006c00650000022f9078ac1e0001ac1414aa071797e000000100000000ac1e0101e00000026401010000441c96b37f000001000000047f00000100000008ffffffff0000000894040100891b88ac141444e0000002e00000010a01010164010102e00000029404010000"]}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8010800", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf25190000000c00018008000300000000002c00018014000200776732000000000000000000000000001400020076657468305f746f5f626f6e6400000068000180140002006970365f76746930000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000300030000000800030002000000140002000000000000000000000000000000000008000300030000001400020076657468315f746f5f627269646765003400018014000200626f6e645f736c6176655f310000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=r5, @ANYBLOB="14000200626f6e643000000000000000000000002c00018014000200000000000000000000000000000000001400020065727370616e3000000000000000000050000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002007465616d5f736c6176655f30000000001400020076657468315f746f5f6873720000000014000200627269646765300000000000000000002400018008000100", @ANYRES32=r7, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYBLOB="0800030000000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'syztnl2\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, &(0x7f0000000080)) 08:51:25 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) [ 597.636907][T21433] REISERFS (device loop0): checking transaction log (loop0) [ 597.667716][T21433] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore 08:51:25 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x131830, 0xffffffffffffffff, 0x0) [ 597.693022][T21433] REISERFS (device loop0): Using rupasov hash to sort names 08:51:25 executing program 5: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x20040050) 08:51:25 executing program 4: r0 = socket(0x2, 0x6, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 08:51:25 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed410000", 0x38, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:51:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c00000003237b"], 0x1c}}, 0x0) 08:51:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80045518, 0x0) 08:51:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000240)) 08:51:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2000000002, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000dc0)={0xc, @output}) 08:51:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000140), 0x4) [ 598.118324][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 598.131356][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 598.131557][T21473] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 598.140180][ T3925] loop1: p2 < > 08:51:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) [ 598.222626][T21473] REISERFS (device loop0): using ordered data mode [ 598.232229][T21484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8963 sclass=netlink_route_socket pid=21484 comm=syz-executor.3 [ 598.245440][T21473] reiserfs: using flush barriers [ 598.251499][T21473] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:25 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000003c00)={0x2020}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007580)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000095c0)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000001c0)={0x18, 0x0, r2}, 0x18) 08:51:25 executing program 1: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0xff600000) 08:51:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f0000000140)={'tunl0\x00', 0x0}) 08:51:25 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) getsockname(r0, 0x0, &(0x7f0000000140)) [ 598.382642][T21473] REISERFS (device loop0): checking transaction log (loop0) [ 598.417666][T21473] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 598.467653][T21473] REISERFS (device loop0): Using rupasov hash to sort names [ 598.499914][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 598.544842][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:51:26 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed410000", 0x38, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:26 executing program 4: r0 = socket(0xa, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) 08:51:26 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 08:51:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @dev}, {0x0, @broadcast}, 0x96, {0x2, 0x0, @private}, 'macvlan1\x00'}) 08:51:26 executing program 1: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000040)) [ 598.585370][ T3925] loop1: p2 < > 08:51:26 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8982, 0x0) 08:51:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080000}) 08:51:26 executing program 3: r0 = socket(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000000)="229f", 0x2, 0x0, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x80) 08:51:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 598.842683][T21516] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:26 executing program 1: clone3(&(0x7f0000001b00)={0x21002200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 08:51:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "8d8592e47281a1632d536c4f5edd2f3a3a1bc9e3655195f56cffc6bcb87f9de7"}) [ 598.898027][T21516] REISERFS (device loop0): using ordered data mode [ 598.904742][T21516] reiserfs: using flush barriers [ 598.914560][T21516] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:26 executing program 4: keyctl$restrict_keyring(0xc, 0x0, 0x0, 0x0) [ 599.052168][T21516] REISERFS (device loop0): checking transaction log (loop0) [ 599.084621][T21516] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 599.218950][T21516] REISERFS (device loop0): Using rupasov hash to sort names 08:51:26 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed410000", 0x38, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:26 executing program 2: syz_mount_image$cramfs(&(0x7f0000000100)='cramfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1bec2557148dc702, &(0x7f0000001b00)) 08:51:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x5c) 08:51:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @local}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 08:51:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000000720000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0xb9, &(0x7f00000000c0)=""/185, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:26 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 08:51:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10, 0x1, 0x5}}], 0x10}], 0x1, 0x0) 08:51:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="0d7803df1564006c6be8119c5018900cb71b0b1efa92ad4b66d013aafecaedfeb7bcb01e7a47326cf4ac04bf2aeb26b70a23d5f17228a8d948282e51e15b909fa8b93af8ba70f20a7faa083be74c9f23dfbb4a0eb27ff13ed8487c0c1b3be41cff93ea0237965b623d3b04ccc065616db207f0f7a926eb2811441581260432cb1e947e964c8422b92296f43f2244b16993f3c656c14a2cf367c9d22d458873c9a4b1ff1e51a9c0677758cd589008b1823dc8645df55a9490d3b9071a383d4e423b64f39b3133da6a"}) 08:51:27 executing program 3: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000002b80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 08:51:27 executing program 2: r0 = socket$kcm(0x10, 0x804000000002, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'vcan0\x00', @ifru_names}) 08:51:27 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x8}}, 0x24) [ 599.655328][T21552] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 599.676307][T21552] REISERFS (device loop0): using ordered data mode [ 599.702254][T21552] reiserfs: using flush barriers 08:51:27 executing program 2: r0 = socket(0x26, 0x5, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) [ 599.751968][T21552] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 599.901833][T21552] REISERFS (device loop0): checking transaction log (loop0) [ 599.933834][T21552] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 600.037743][T21552] REISERFS (device loop0): Using rupasov hash to sort names 08:51:27 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39}], 0x0, &(0x7f0000011500)) 08:51:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x4) 08:51:27 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, 0x0) 08:51:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, 0x0) 08:51:27 executing program 4: r0 = epoll_create(0xe62b) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x10000000}) 08:51:27 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 08:51:27 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 08:51:27 executing program 5: r0 = socket(0x23, 0x80002, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 08:51:27 executing program 4: add_key(&(0x7f0000001340)='cifs.idmap\x00', 0x0, 0x0, 0xffffffffffffff99, 0x0) 08:51:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 08:51:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}}) [ 600.457965][T21587] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="737903746e6c300000000000", @ANYRES32=0x0, @ANYBLOB="87"]}) [ 600.502314][T21587] REISERFS (device loop0): using ordered data mode [ 600.553803][T21587] reiserfs: using flush barriers [ 600.593421][T21587] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 600.650641][T21587] REISERFS (device loop0): checking transaction log (loop0) [ 600.662132][T21587] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 600.678767][T21587] REISERFS (device loop0): Using rupasov hash to sort names 08:51:28 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39}], 0x0, &(0x7f0000011500)) 08:51:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x87}, {0x6}]}) 08:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x5056c12bb2d6ec51, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 08:51:28 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5450, 0x0) 08:51:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x40}], 0x1, 0x0) 08:51:28 executing program 4: socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) [ 600.787055][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 600.829863][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 600.849087][ T3925] loop1: p2 < > 08:51:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x24, 0x0, 0x0) 08:51:28 executing program 4: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 08:51:28 executing program 1: bpf$PROG_LOAD(0x11, 0x0, 0x0) 08:51:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r0, 0x0, 0x43) [ 600.940124][ T28] audit: type=1326 audit(1601369488.488:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 [ 601.032251][T21621] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 601.069687][T21621] REISERFS (device loop0): using ordered data mode 08:51:28 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@nfc, 0x200000c0) [ 601.087763][T21621] reiserfs: using flush barriers [ 601.104875][T21621] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:28 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x684002) [ 601.182499][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 601.223629][T21621] REISERFS (device loop0): checking transaction log (loop0) [ 601.233387][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 601.248353][ T3925] loop1: p2 < > [ 601.262183][T21621] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 601.321560][T21621] REISERFS (device loop0): Using rupasov hash to sort names 08:51:29 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39}], 0x0, &(0x7f0000011500)) [ 601.542032][T21642] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 601.553290][T21642] REISERFS (device loop0): using ordered data mode [ 601.556978][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 601.561824][T21642] reiserfs: using flush barriers [ 601.580013][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 601.580249][T21642] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 601.591268][ T3925] loop1: p2 < > [ 601.608275][T21642] REISERFS (device loop0): checking transaction log (loop0) [ 601.619175][T21642] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 601.640927][ T28] audit: type=1326 audit(1601369489.188:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21606 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460bda code=0x0 08:51:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454da, 0x0) 08:51:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) recvmsg$can_bcm(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)=""/25, 0x19}], 0x1}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 08:51:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000140)={'tunl0\x00', 0x0}) 08:51:29 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) 08:51:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000040)={0x0, @raw_data="ffc966a73e822a8c7dde9375d84acad2d6bf730599c5807c774160d180cdcb667d2df13ce148e017c8462fb7024699ea1c6613a7bc6293cd81ff7e37ab1cfe6604d6740c854fa59e7422d426016f260704f7fcfd2aba9d0f293a7455093afd0ff1d15003c481f0516ebaaa4d6a3b7453751f299ca65d4138b6c961fab4c4ecb0cd8ffa2786dc2644ef8b28449c484c6cf9774af3406c23b9d39e93bb834f8f684b796b3ca681a02a0e5e6316f80f5f5008a9532d4d3e1cdc36c069e8c1881ff2b2b3a1de5c59c66b"}) [ 601.693936][T21642] REISERFS (device loop0): Using rupasov hash to sort names 08:51:29 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}}, 0x24) 08:51:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x20000361, &(0x7f0000000000)=@framed={{}, [@ldst, @alu, @func, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @initr0, @alu, @map, @exit, @generic]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0xffffffffffffffff}, 0x78) [ 601.793011][T21659] block nbd1: Device being setup by another task 08:51:29 executing program 5: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 08:51:29 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x9}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$nfc_llcp(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x492492492492494, 0x0) 08:51:29 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:29 executing program 2: socket$packet(0x11, 0x3, 0x300) select(0x40, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x8}, 0x0, 0x0) 08:51:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfdef) 08:51:29 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x3) [ 602.226620][T21676] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 602.241994][T21676] REISERFS (device loop0): using ordered data mode [ 602.250819][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 602.263947][T21676] reiserfs: using flush barriers [ 602.270893][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 602.279723][T21676] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 602.292359][ T3925] loop1: p2 < > [ 602.314930][T21676] REISERFS (device loop0): checking transaction log (loop0) [ 602.333254][T21676] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 602.373387][T21676] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 602.406076][T21676] REISERFS (device loop0): Remounting filesystem read-only [ 602.413303][T21676] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 602.445915][T21676] REISERFS (device loop0): Using rupasov hash to sort names [ 602.530852][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 602.533371][T21650] block nbd1: shutting down sockets [ 602.563061][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 602.571031][T21659] block nbd1: Device being setup by another task 08:51:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f0000000140)) 08:51:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname(r0, 0x0, &(0x7f0000000100)) 08:51:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000300)=r1) 08:51:30 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 08:51:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001"], 0x3c}}, 0x0) 08:51:30 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) [ 602.588915][T21650] block nbd1: shutting down sockets [ 602.589901][ T3925] loop1: p2 < > 08:51:30 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="21d954844bb5"}, 0x10) [ 602.718025][T21698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 602.749205][T21699] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 602.794774][T21707] device ip6_vti0 entered promiscuous mode [ 602.803707][T21706] device ip6_vti0 left promiscuous mode [ 602.811033][T21708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 602.815583][T21699] REISERFS (device loop0): using ordered data mode [ 602.836228][T21707] device ip6_vti0 entered promiscuous mode 08:51:30 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x24) 08:51:30 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x6e040, 0x0) [ 602.843467][T21707] device ip6_vti0 left promiscuous mode [ 602.857506][T21699] reiserfs: using flush barriers [ 602.871069][T21699] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:30 executing program 2: rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8001}) 08:51:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18260000", @ANYRES32, @ANYBLOB="000016"], &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 602.966819][T21699] REISERFS (device loop0): checking transaction log (loop0) 08:51:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@private2, @mcast1, @ipv4={[], [], @private}, 0x0, 0x0, 0xfffc}) [ 603.023018][T21699] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 08:51:30 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@nfc, 0x80) [ 603.083399][ T28] audit: type=1800 audit(1601369490.629:53): pid=21717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="vcsa" dev="sda1" ino=16317 res=0 errno=0 [ 603.088923][T21699] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? 08:51:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x125e, 0xd04a00) [ 603.167390][ T28] audit: type=1800 audit(1601369490.669:54): pid=21717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="vcsa" dev="sda1" ino=16317 res=0 errno=0 08:51:30 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 08:51:30 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1b, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x24) [ 603.219322][T21699] REISERFS (device loop0): Remounting filesystem read-only [ 603.250146][T21699] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 603.303479][T21699] REISERFS (device loop0): Using rupasov hash to sort names 08:51:31 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:31 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0189436, 0x0) 08:51:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc020660b, 0x0) 08:51:31 executing program 3: socketpair(0x25, 0x0, 0x0, &(0x7f0000000180)) 08:51:31 executing program 4: bpf$PROG_LOAD(0x9, 0x0, 0x0) 08:51:31 executing program 5: socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) fanotify_init(0x4c, 0x0) 08:51:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x2001006f) 08:51:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, 0x0) 08:51:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 08:51:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @private2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x300}) 08:51:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x541d, 0x0) [ 603.644183][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 603.668845][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 603.679787][ T3925] loop1: p2 < > 08:51:31 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2) write$tun(r0, &(0x7f0000000040)={@val, @void, @ipv6=@dccp_packet={0x0, 0x6, "cf1ae8", 0xfc, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, {[@routing={0x11, 0x4, 0x0, 0x3, 0x0, [@mcast1, @ipv4={[], [], @multicast1}]}, @srh={0x8, 0x2, 0x4, 0x1, 0x0, 0x0, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x88, 0x0, [], [@enc_lim={0x4, 0x1, 0x7f}]}], {{0x4e24, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6, "3971f7", 0x2, "976ec3"}, "80ba538d6d5d321602aec1e381b28eace387edbd153a42e46544266ac5cd8f98828a17331feaf47e9c0855f41def6b6b025f33e4cb3896417050b9792140f1b5517f344788690c65bde69cb5deca1b3e96082e25229166ca4cf0f911f9c5b550fa254ddc8121719504196f68ba5d40b43212bca644d2fa390d0bd42a04fd96d19795be590f6aedb7ff62dfea5da5a55cad9f4098147e04a09704edc0"}}}}, 0x128) [ 603.710297][T21746] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 603.747767][T21746] REISERFS (device loop0): using ordered data mode [ 603.787496][T21746] reiserfs: using flush barriers [ 603.837351][T21746] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 603.960012][T21746] REISERFS (device loop0): checking transaction log (loop0) [ 603.981442][T21746] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 604.000083][T21746] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 604.011965][T21746] REISERFS (device loop0): Remounting filesystem read-only [ 604.019697][T21746] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 604.038715][T21746] REISERFS (device loop0): Using rupasov hash to sort names 08:51:31 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {0x0, 0x0, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 08:51:31 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7002, 0x0) 08:51:31 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f0000000040)="db", 0x1, 0x40, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 08:51:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc00caee0, 0x0) [ 604.134879][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 604.174556][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 604.194841][ T3925] loop1: p2 < > 08:51:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000000040)={@rand_addr=' \x01\x00', @ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000b}) 08:51:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @broadcast}, 0x0, 0x0, 0x2, 0x0, 0x5, 0x290304, r1}) 08:51:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x201, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) [ 604.322846][T21780] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x101081) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 08:51:31 executing program 1: mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x5) [ 604.403169][T21780] REISERFS (device loop0): using ordered data mode [ 604.446319][T21780] reiserfs: using flush barriers [ 604.466198][T21780] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 604.558215][T21780] REISERFS (device loop0): checking transaction log (loop0) [ 604.598703][T21780] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 604.665001][T21780] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 604.721506][T21780] REISERFS (device loop0): Remounting filesystem read-only [ 604.743500][T21780] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 604.758221][T21780] REISERFS (device loop0): Using rupasov hash to sort names 08:51:32 executing program 2: socketpair(0x1e, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, 0x0, 0x0) 08:51:32 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) unshare(0x400) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 08:51:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 08:51:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0x8, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="8a3259001c00200229bd0200fb070058dbdf2502000000", @ANYRES32, @ANYBLOB="0800a0080a000200aaaaaaaaaabb000014000100fe8000000000000000000000000000aa08000b000600000008000800", @ANYRES32, @ANYBLOB="14000300ff0700000300000005000000fbffffff08000900ffffff7f08000a000700000008000a00ab5200000a000200ffffffffffff000008000800", @ANYRES32=0x0, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 08:51:32 executing program 1: r0 = socket(0x2, 0x3, 0x2) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0xf) 08:51:32 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {0x0, 0x0, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:32 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) 08:51:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) connect(r0, 0x0, 0x0) [ 605.111136][T21808] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4a22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) 08:51:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 605.154405][T21808] REISERFS (device loop0): using ordered data mode [ 605.161757][T21808] reiserfs: using flush barriers [ 605.169231][T21808] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 605.211128][T21808] REISERFS (device loop0): checking transaction log (loop0) [ 605.222759][T21808] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 605.236606][T21808] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 605.250485][T21808] REISERFS (device loop0): Remounting filesystem read-only [ 605.260345][T21808] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 605.277775][T21808] REISERFS (device loop0): Using rupasov hash to sort names 08:51:32 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x20000180) 08:51:32 executing program 2: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 08:51:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @private0}) 08:51:32 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {0x0, 0x0, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:33 executing program 1: r0 = socket(0x29, 0x5, 0x0) recvmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 08:51:33 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) 08:51:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x5056c12bb2d6ec51, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) [ 605.572131][T21831] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:33 executing program 5: r0 = socket(0x18, 0x0, 0x2) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) 08:51:33 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 605.625775][T21831] REISERFS (device loop0): using ordered data mode [ 605.659570][T21831] reiserfs: using flush barriers 08:51:33 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x540c, 0x0) [ 605.696608][T21831] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40c1) [ 605.800687][T21831] REISERFS (device loop0): checking transaction log (loop0) [ 605.837437][T21831] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 08:51:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x15, 0x1, 0x5) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) recvfrom$inet6(r5, &(0x7f0000000480)=""/103, 0x67, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x7fff, @remote, 0xde8}, 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000071a69a986200", @ANYRES16=r4, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfd2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x0, 0x5, 0x1, @dev={[], 0x26}, 'bridge_slave_0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85021b}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7df3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7b8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}}, 0x84) 08:51:33 executing program 3: r0 = socket(0x28, 0x1, 0x0) getpeername$packet(r0, 0x0, 0x0) 08:51:33 executing program 4: r0 = socket(0x15, 0x5, 0x0) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="850d2319a7f8"}, 0x14) [ 605.904566][T21831] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 605.938721][T21831] REISERFS (device loop0): Remounting filesystem read-only [ 605.980853][T21831] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 606.118241][T21831] REISERFS (device loop0): Using rupasov hash to sort names [ 606.326512][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 606.338072][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 606.345204][ T3925] loop1: p2 < > 08:51:33 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300), 0x0, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 08:51:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0, 0x54}}, 0x0) 08:51:34 executing program 3: r0 = socket(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 08:51:34 executing program 2: clone3(&(0x7f0000000540)={0x180093200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:51:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="af0fac0efc8c"}, 0x14) 08:51:34 executing program 5: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) 08:51:34 executing program 3: select(0xfefdffff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)) 08:51:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}) 08:51:34 executing program 2: r0 = socket(0x29, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 08:51:34 executing program 5: bpf$PROG_LOAD(0x7, 0x0, 0x0) [ 606.635253][T21886] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 606.661438][T21886] REISERFS (device loop0): using ordered data mode 08:51:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000140)={'tunl0\x00', 0x0}) [ 606.688787][T21886] reiserfs: using flush barriers [ 606.703299][T21886] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 606.762294][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 606.830107][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 606.834612][T21886] REISERFS (device loop0): checking transaction log (loop0) [ 606.854383][T21886] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 606.859377][ T3925] loop1: p2 < > [ 606.888105][T21886] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 606.913974][T21886] REISERFS (device loop0): Remounting filesystem read-only [ 606.921730][T21886] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 606.935931][T21886] REISERFS (device loop0): Using rupasov hash to sort names 08:51:34 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300), 0x0, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x35a3aad1) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/4103, 0x1007}], 0x1, 0x0, 0x0, 0x10}, 0x0) 08:51:34 executing program 3: r0 = socket(0x23, 0x80002, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) 08:51:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0), 0x4) 08:51:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)=ANY=[]}) 08:51:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x38}], 0x1, 0x0) 08:51:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x80d28, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000300)={0x3}) 08:51:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)) 08:51:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 607.259971][T21918] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 607.288484][T21918] REISERFS (device loop0): using ordered data mode 08:51:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1ff, 0x2}) [ 607.306064][T21918] reiserfs: using flush barriers [ 607.322565][T21918] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:35 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$qrtr(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1}, 0x38, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x492492492492494, 0x0) [ 607.450426][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 607.466967][T21918] REISERFS (device loop0): checking transaction log (loop0) [ 607.493815][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 607.521747][ T3925] loop1: p2 < > [ 607.530105][T21918] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 607.579849][T21918] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 607.600433][T21918] REISERFS (device loop0): Remounting filesystem read-only [ 607.609332][T21918] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 607.624395][T21918] REISERFS (device loop0): Using rupasov hash to sort names 08:51:35 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300), 0x0, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) [ 607.864458][T21967] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 607.875585][T21967] REISERFS (device loop0): using ordered data mode [ 607.882390][T21967] reiserfs: using flush barriers [ 607.890265][T21967] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 607.912206][T21967] REISERFS (device loop0): checking transaction log (loop0) [ 607.923007][T21967] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 607.934178][T21967] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 607.947343][T21967] REISERFS (device loop0): Remounting filesystem read-only 08:51:35 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x3fffff) 08:51:35 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80) 08:51:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3, @win={{0x1}, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0}}) 08:51:35 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, 0x0) [ 607.954850][T21967] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 607.968880][T21967] REISERFS (device loop0): Using rupasov hash to sort names 08:51:35 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000", 0x23, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x61a2, 0x40800) read$FUSE(r0, 0x0, 0x0) 08:51:35 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:51:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x401870cc, 0x0) 08:51:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="46fc7c73e39d9d4ef1a92c4d1144", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 08:51:35 executing program 1: r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) [ 608.310804][T21990] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 608.334777][T21990] REISERFS (device loop0): using ordered data mode [ 608.343869][T21990] reiserfs: using flush barriers [ 608.357066][T21990] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 608.410210][T21990] REISERFS (device loop0): checking transaction log (loop0) 08:51:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x64040881) 08:51:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x300}) 08:51:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0189436, 0x0) 08:51:36 executing program 3: r0 = socket(0xa, 0x3, 0x4) recvmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000001) [ 608.457071][T21990] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey 08:51:36 executing program 1: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000800)="0aa684515df05e74", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000002280)={'syz', 0x2}, &(0x7f00000022c0)="f76685f12d5ead856b728c3c8cd98b1aaec4bd9a20d969f7cd9632af4e153ed09d32104b539b9273866340cdddce162c6a8574be2f657d281db32d2df5e860a6518758c08e21bc815ef98adb02e5071f8a65c7462f6e8ee0af0d251dbccc26bbd80a23cb96713ea09236f1127172e8204761f0bf7f47fcc8d6cc6825632235d53fa48d9a1da69d53f66476537dec0efed5e868649de0086332b716921c1e1cc3ec63d8654716c0ea462c7f00086c73070000001af8db115356055471b89f97e8f2e4cdf4ee3aba4b351591b0ac2781c0d55607", 0xd3, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r3, r2}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={'sha1-avx2\x00'}}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r4, r0}, 0xfffffffffffffffd, 0x0, 0x0) [ 608.536590][T21990] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? 08:51:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x5411, 0x0) [ 608.587986][T21990] REISERFS (device loop0): Remounting filesystem read-only [ 608.621631][T21990] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 608.680781][T21990] REISERFS (device loop0): Using rupasov hash to sort names 08:51:36 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000", 0x23, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:36 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f00000000c0)) 08:51:36 executing program 2: r0 = socket(0xa, 0x80002, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 08:51:36 executing program 5: bpf$PROG_LOAD(0xe, 0x0, 0x0) 08:51:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xff00) 08:51:36 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x4c2, 0x0) [ 608.799792][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 608.824896][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 608.845668][ T3925] loop1: p2 < > 08:51:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x0) 08:51:36 executing program 3: r0 = socket(0x21, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 08:51:36 executing program 2: clone3(&(0x7f0000001b00)={0x21002200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:51:36 executing program 5: r0 = io_uring_setup(0x1929, &(0x7f0000000240)) r1 = io_uring_setup(0x192b, &(0x7f0000000240)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x8, 0x532000, r2) [ 609.066297][T22028] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 609.075751][T22028] REISERFS (device loop0): using ordered data mode [ 609.082341][T22028] reiserfs: using flush barriers [ 609.089682][T22028] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 609.110157][T22028] REISERFS (device loop0): checking transaction log (loop0) [ 609.120562][T22028] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 609.132814][T22028] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 609.144048][T22028] REISERFS (device loop0): Remounting filesystem read-only [ 609.152532][T22028] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 08:51:36 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80047437, 0x0) 08:51:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000140)={'tunl0\x00', 0x0}) [ 609.166471][T22028] REISERFS (device loop0): Using rupasov hash to sort names 08:51:36 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000", 0x23, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:36 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78}, 0xfffffffffffffdbb) 08:51:36 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80108906, 0x0) 08:51:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local={0xfe, 0x80, [0x0, 0x6]}, @empty, @private2, 0x0, 0x61, 0x0, 0x0, 0x0, 0x300}) 08:51:37 executing program 1: r0 = socket(0x23, 0x80002, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 08:51:37 executing program 3: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001"], 0x38}], 0x1, 0x0) clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) 08:51:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4a22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 08:51:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5460, 0x0) [ 609.533968][T22062] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x2, 0x0) [ 609.580783][T22062] REISERFS (device loop0): using ordered data mode [ 609.631625][T22062] reiserfs: using flush barriers 08:51:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x3, 0x0, 0x8001}, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local}}, 0x1e) 08:51:37 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(r0, 0x0, 0x16) 08:51:37 executing program 1: bpf$PROG_LOAD(0x22, 0x0, 0x0) [ 609.675385][T22062] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 609.759031][T22062] REISERFS (device loop0): checking transaction log (loop0) [ 609.826575][T22062] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 609.885565][T22062] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 609.904071][T22062] REISERFS (device loop0): Remounting filesystem read-only [ 609.919994][T22062] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 610.000226][T22062] REISERFS (device loop0): Using rupasov hash to sort names 08:51:37 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f01000100000002", 0x35, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:37 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 08:51:37 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0xe, r1, 0x0, 0x0) 08:51:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 08:51:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f00000023c0)={@void, @void, @mpls={[{0x6, 0x0, 0x1}], @ipv6=@icmpv6={0x0, 0x6, "d2c03b", 0xf9e, 0x3a, 0x0, @private1, @ipv4={[], [], @dev}, {[], @ndisc_rs={0x85, 0x0, 0x0, [], [{0x0, 0x1f2, "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"}]}}}}}, 0xfca) 08:51:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, 0x0) 08:51:37 executing program 5: keyctl$restrict_keyring(0x12, 0xffffffffffffffff, 0x0, 0x0) 08:51:38 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f0000000040)="db", 0x1, 0x40, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 08:51:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, 0x0, 0x300) 08:51:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@dev]}) 08:51:38 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f00000019c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000003ec0), 0x2}], 0x1001, 0x0) [ 610.539067][T22103] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 610.562055][T22103] REISERFS (device loop0): using ordered data mode [ 610.600662][T22103] reiserfs: using flush barriers [ 610.696820][T22103] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:38 executing program 5: keyctl$restrict_keyring(0x12, 0xffffffffffffffff, 0x0, 0x0) [ 610.786052][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 610.832528][T22103] REISERFS (device loop0): checking transaction log (loop0) [ 610.838015][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 610.884888][ T3925] loop1: p2 < > [ 610.901073][T22103] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 610.943540][T22103] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 610.995291][T22103] REISERFS (device loop0): Remounting filesystem read-only [ 611.003315][T22103] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 611.019033][T22103] REISERFS (device loop0): Using rupasov hash to sort names 08:51:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0xb2) 08:51:38 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x23) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @remote, 0x4e23, 0x0, 'sh\x00', 0x28, 0x4, 0x11}, 0x2c) 08:51:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) 08:51:38 executing program 5: keyctl$restrict_keyring(0x12, 0xffffffffffffffff, 0x0, 0x0) 08:51:38 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f01000100000002", 0x35, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:38 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040080) 08:51:38 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x6, r1, &(0x7f0000000000)='syzkaller\x00', 0x0) 08:51:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xf}], 0x1, 0x0) [ 611.364020][T22140] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:39 executing program 5: keyctl$restrict_keyring(0x12, 0xffffffffffffffff, 0x0, 0x0) 08:51:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:39 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) [ 611.491557][T22140] REISERFS (device loop0): using ordered data mode [ 611.562684][T22140] reiserfs: using flush barriers [ 611.573244][T22148] syz-executor.4[22148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 08:51:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x0, 0x1, [@remote]}) [ 611.597763][T22148] syz-executor.4[22148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.629620][T22140] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000100)) 08:51:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 08:51:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f0000003740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x2, 0x2, {0x0, 0x0, 0xee00}}}], 0x20}], 0x1, 0x0) 08:51:39 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 611.848407][T22140] REISERFS (device loop0): checking transaction log (loop0) [ 611.897275][T22140] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 611.983408][T22140] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 612.015184][T22140] REISERFS (device loop0): Remounting filesystem read-only [ 612.056796][T22140] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 612.078302][T22140] REISERFS (device loop0): Using rupasov hash to sort names 08:51:39 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f01000100000002", 0x35, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:39 executing program 4: keyctl$restrict_keyring(0x4, 0x0, 0x0, 0x0) 08:51:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 08:51:39 executing program 5: r0 = socket(0x2, 0x1, 0x0) connect$ax25(r0, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 08:51:39 executing program 3: r0 = socket(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x0, 0xe0}, 0x200000cc, &(0x7f00000004c0)={0x0}}, 0x0) 08:51:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000002340)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0xbb8) 08:51:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c"], 0x3c}}, 0x0) 08:51:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0x4020940d, &(0x7f0000000300)={0x4}) 08:51:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 08:51:39 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 08:51:39 executing program 5: bpf$PROG_LOAD(0xa, 0x0, 0x10) [ 612.446138][T22186] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 612.481441][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 612.499024][T22186] REISERFS (device loop0): using ordered data mode [ 612.519341][T22186] reiserfs: using flush barriers [ 612.524606][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 612.534341][ T3925] loop1: p2 < > 08:51:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffe}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}}, 0x0) [ 612.539602][T22186] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 612.561416][T22186] REISERFS (device loop0): checking transaction log (loop0) [ 612.573692][T22186] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 612.615274][T22186] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 612.642323][T22186] REISERFS (device loop0): Remounting filesystem read-only [ 612.677720][T22186] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 612.706523][T22186] REISERFS (device loop0): Using rupasov hash to sort names 08:51:40 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401", 0x3e, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@local, @empty={[0x61]}, @private2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600}) 08:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000200)}) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000340)) add_key(&(0x7f0000000040)='id_resolver\x00', 0x0, 0x0, 0x0, 0x0) 08:51:40 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 08:51:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:40 executing program 3: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0xffffffffffffffff) [ 612.801101][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 612.812698][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 612.831129][ T3925] loop1: p2 < > 08:51:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0xc0101282, 0x0) 08:51:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1d, 0x0, 0x0, 0x0, 0x0, {0x25}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x88}}, 0x0) 08:51:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x0) 08:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 613.090752][T22222] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 613.115937][T22222] REISERFS (device loop0): using ordered data mode [ 613.152233][T22222] reiserfs: using flush barriers [ 613.221750][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 613.236451][T22222] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) 08:51:40 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc180, 0x0) [ 613.267028][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 613.282494][ T3925] loop1: p2 < > [ 613.308979][T22222] REISERFS (device loop0): checking transaction log (loop0) [ 613.381401][T22222] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 613.427674][T22222] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 613.479464][T22222] REISERFS (device loop0): Remounting filesystem read-only [ 613.529324][T22222] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 613.617105][T22222] REISERFS (device loop0): Using rupasov hash to sort names 08:51:41 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401", 0x3e, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:41 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5402, 0x0) 08:51:41 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 08:51:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x49c082, 0x0) 08:51:41 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xff, 0x0) 08:51:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:41 executing program 2: request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) 08:51:41 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc33}}) 08:51:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0) 08:51:41 executing program 1: r0 = socket(0x18, 0x0, 0x1) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 08:51:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'netdevsim0\x00'}) [ 614.140291][T22261] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 614.175136][T22261] REISERFS (device loop0): using ordered data mode [ 614.238681][T22261] reiserfs: using flush barriers 08:51:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) [ 614.282071][T22261] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 614.282642][T22271] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 614.370429][T22271] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 614.389084][T22261] REISERFS (device loop0): checking transaction log (loop0) [ 614.503683][T22261] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 614.537512][T22261] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 614.549605][T22261] REISERFS (device loop0): Remounting filesystem read-only [ 614.558325][T22261] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 614.572745][T22261] REISERFS (device loop0): Using rupasov hash to sort names 08:51:42 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401", 0x3e, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x401870c8, 0x0) 08:51:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000240)) 08:51:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:42 executing program 4: openat$cuse(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) 08:51:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000000140)) 08:51:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x1002, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x9, @raw_data="0d7803df1564006c6be8119c5018900cb71b0b1efa92ad4b66d013aa577e9ec3b7bcb01e7a47326cf4ac04bf2aeb26b70a23d5f17228a8d948282e51e15b909fa8b93af8ba70f20a7faa083be74c9f23dfbb4a0eb27ff13ed8487c0c1b3be41cff93ea0237965b623d3b04ccc065616db207f0f7a926eb2811441581260432cb1e947e964c8422b92296f43f2244b16993f3c656c14a2cf367c9d22d458873c9a4b1ff1e51a9c0677758cd589008b1823dc8645df55a9490d3b9071a383d4e423b64f39b3133da6a"}) 08:51:42 executing program 1: socketpair(0x6, 0x2, 0x0, 0x0) socketpair(0x0, 0x80004, 0x8, &(0x7f0000000040)) r0 = socket$isdn_base(0x22, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1}, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x3, 0x4, 0x6, 0xff}, 'syz0\x00', 0x8}) bind$isdn_base(r0, &(0x7f0000000100)={0x22, 0x0, 0x3f, 0x5, 0x5}, 0x6) 08:51:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) 08:51:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000300)) [ 614.940193][T22295] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 614.949899][T22295] REISERFS (device loop0): using ordered data mode [ 614.957085][T22295] reiserfs: using flush barriers [ 614.971660][T22295] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cb, &(0x7f0000000140)) [ 615.038453][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 615.065547][T22295] REISERFS (device loop0): checking transaction log (loop0) [ 615.074290][T22295] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey 08:51:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) write$tun(r0, &(0x7f0000000000)={@val, @val, @mpls={[{}], @llc={@snap={0x0, 0x0, "f2", "6c853a"}}}}, 0x4) [ 615.086811][T22295] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 615.100649][T22295] REISERFS (device loop0): Remounting filesystem read-only [ 615.108499][T22295] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 615.123172][T22295] REISERFS (device loop0): Using rupasov hash to sort names [ 615.149377][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 615.165728][ T3925] loop1: p2 < > 08:51:42 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f40100000200", 0x42, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454cb, 0x0) 08:51:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="fc"], 0x54}}, 0x0) 08:51:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffe2d, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x98}}, 0x0) 08:51:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000007d00)={0x2020}, 0x2020) 08:51:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "040c619a"}, 0x0, 0x0, @userptr, 0x300}) 08:51:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8916, 0x0) [ 615.458849][T22327] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 615.488878][T22327] REISERFS (device loop0): using ordered data mode [ 615.513167][T22327] reiserfs: using flush barriers 08:51:43 executing program 4: r0 = socket(0xa, 0x3, 0xb) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) [ 615.588351][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 615.598755][T22327] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 615.605781][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 615.630643][ T3925] loop1: p2 < > 08:51:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5409, 0x0) 08:51:43 executing program 5: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) clone3(&(0x7f0000001b00)={0x21002200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:51:43 executing program 4: r0 = socket(0x2, 0x3, 0x2) connect$rose(r0, &(0x7f0000000000)=@short={0xa, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0xf) [ 615.805205][T22327] REISERFS (device loop0): checking transaction log (loop0) [ 615.829615][T22327] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 615.869364][T22327] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 615.907660][T22327] REISERFS (device loop0): Remounting filesystem read-only [ 615.930530][T22327] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 615.974457][T22327] REISERFS (device loop0): Using rupasov hash to sort names 08:51:43 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f40100000200", 0x42, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:51:43 executing program 1: 08:51:43 executing program 2: syz_open_procfs$namespace(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b90103600500f000009e0ff043051fffffe100004000633a77fbac141441e0000001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xe0ffffff, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 08:51:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x41045508, 0x0) 08:51:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x9, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x2, 0xb, 0x3, 0x14, 0x14]}}) 08:51:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f79f361879473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a0578442926ef4e912f01a201e694e3806e8c8fe8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc3fd282cdbe1335c91fb10d5c794d8b9d7c33632152c58eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fd8648a3f4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e9724310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315878f88a8fb1dd679fb4c5557abae6849917dc59a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429e95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfc79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000000000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e9efb3e1e7a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca1100"/1285], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x1f0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 08:51:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 616.385194][T22372] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:44 executing program 2: [ 616.452197][T22372] REISERFS (device loop0): using ordered data mode [ 616.520943][T22372] reiserfs: using flush barriers 08:51:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 616.560424][T22372] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 616.579179][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:44 executing program 1: [ 616.620375][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 616.645999][ T3925] loop1: p2 < > [ 616.680049][T22372] REISERFS (device loop0): checking transaction log (loop0) 08:51:44 executing program 4: [ 616.724491][T22372] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 616.808123][T22372] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 616.874824][T22372] REISERFS (device loop0): Remounting filesystem read-only [ 616.901576][T22372] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 616.951743][T22372] REISERFS (device loop0): Using rupasov hash to sort names [ 617.003707][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 617.015439][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 617.022503][ T3925] loop1: p2 < > 08:51:44 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f40100000200", 0x42, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:44 executing program 2: 08:51:44 executing program 1: 08:51:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x9, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x2, 0xb, 0x3, 0x14, 0x14]}}) 08:51:44 executing program 4: 08:51:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:51:44 executing program 1: 08:51:44 executing program 2: 08:51:44 executing program 4: [ 617.268154][T22409] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:44 executing program 1: [ 617.332096][T22409] REISERFS (device loop0): using ordered data mode [ 617.418909][T22409] reiserfs: using flush barriers [ 617.442177][T22409] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:45 executing program 2: [ 617.590026][T22409] REISERFS (device loop0): checking transaction log (loop0) [ 617.661663][T22409] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 617.764714][T22409] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 617.806412][T22409] REISERFS (device loop0): Remounting filesystem read-only [ 617.816190][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 617.823969][T22409] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 617.851763][T22409] REISERFS (device loop0): Using rupasov hash to sort names [ 617.858960][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 617.873339][ T3925] loop1: p2 < > 08:51:45 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000", 0x44, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:45 executing program 1: 08:51:45 executing program 2: 08:51:45 executing program 4: 08:51:45 executing program 5: 08:51:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:45 executing program 4: 08:51:45 executing program 2: 08:51:45 executing program 1: 08:51:45 executing program 5: [ 618.276359][T22442] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 618.294238][T22442] REISERFS (device loop0): using ordered data mode [ 618.305626][T22442] reiserfs: using flush barriers 08:51:45 executing program 1: [ 618.319051][T22442] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 08:51:46 executing program 5: [ 618.460064][T22442] REISERFS (device loop0): checking transaction log (loop0) [ 618.541048][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 618.559368][T22442] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 618.599279][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 618.613087][T22442] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 618.627806][T22442] REISERFS (device loop0): Remounting filesystem read-only [ 618.635452][T22442] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 618.652433][T22442] REISERFS (device loop0): Using rupasov hash to sort names [ 618.658571][ T3925] loop1: p2 < > 08:51:46 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000", 0x44, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:46 executing program 4: 08:51:46 executing program 2: 08:51:46 executing program 1: 08:51:46 executing program 5: 08:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:46 executing program 4: 08:51:46 executing program 2: 08:51:46 executing program 1: 08:51:46 executing program 5: 08:51:46 executing program 4: [ 618.995750][T22465] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 619.012260][T22465] REISERFS (device loop0): using ordered data mode 08:51:46 executing program 2: [ 619.065079][T22465] reiserfs: using flush barriers [ 619.106583][T22465] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 619.208162][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 619.226225][T22465] REISERFS (device loop0): checking transaction log (loop0) [ 619.260122][T22465] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 619.276208][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 619.292760][ T3925] loop1: p2 < > [ 619.317177][T22465] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 619.341682][T22465] REISERFS (device loop0): Remounting filesystem read-only [ 619.358449][T22465] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 619.390719][T22465] REISERFS (device loop0): Using rupasov hash to sort names 08:51:47 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000", 0x44, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:47 executing program 5: 08:51:47 executing program 4: 08:51:47 executing program 1: 08:51:47 executing program 2: 08:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:47 executing program 2: 08:51:47 executing program 4: 08:51:47 executing program 5: 08:51:47 executing program 1: [ 619.886160][T22493] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:47 executing program 5: 08:51:47 executing program 1: [ 619.993968][T22493] REISERFS (device loop0): using ordered data mode [ 620.014771][T22493] reiserfs: using flush barriers [ 620.036106][T22493] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 620.068328][T22493] REISERFS (device loop0): checking transaction log (loop0) [ 620.174553][T22493] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 620.218328][T22493] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 620.221431][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 620.256614][T22493] REISERFS (device loop0): Remounting filesystem read-only [ 620.260691][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 620.277043][T22493] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 620.282768][ T3925] loop1: p2 < > [ 620.298490][T22493] REISERFS (device loop0): Using rupasov hash to sort names 08:51:48 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a4", 0x45, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:48 executing program 5: 08:51:48 executing program 2: 08:51:48 executing program 4: 08:51:48 executing program 1: 08:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 620.483166][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:51:48 executing program 4: [ 620.555511][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:51:48 executing program 5: 08:51:48 executing program 1: [ 620.596182][ T3925] loop1: p2 < > 08:51:48 executing program 2: 08:51:48 executing program 2: [ 620.701958][T22518] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:48 executing program 4: [ 620.771709][T22518] REISERFS (device loop0): using ordered data mode [ 620.818563][T22518] reiserfs: using flush barriers [ 620.866232][T22518] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 620.951660][T22518] REISERFS (device loop0): checking transaction log (loop0) [ 620.969994][T22518] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 621.004038][T22518] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 621.022015][T22518] REISERFS (device loop0): Remounting filesystem read-only [ 621.034126][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 621.044248][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 621.048384][T22518] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 621.054768][ T3925] loop1: p2 < > [ 621.064893][T22518] REISERFS (device loop0): Using rupasov hash to sort names 08:51:48 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a4", 0x45, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:48 executing program 5: 08:51:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:48 executing program 1: 08:51:48 executing program 4: 08:51:48 executing program 2: 08:51:48 executing program 2: 08:51:48 executing program 4: 08:51:48 executing program 1: 08:51:48 executing program 5: [ 621.331234][T22544] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 621.348558][T22544] REISERFS (device loop0): using ordered data mode [ 621.383041][T22544] reiserfs: using flush barriers 08:51:49 executing program 2: 08:51:49 executing program 1: [ 621.507670][T22544] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 621.630493][T22544] REISERFS (device loop0): checking transaction log (loop0) [ 621.657938][T22544] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 621.713141][T22544] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 621.730215][T22544] REISERFS (device loop0): Remounting filesystem read-only [ 621.739579][T22544] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 621.754548][T22544] REISERFS (device loop0): Using rupasov hash to sort names 08:51:49 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a4", 0x45, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:49 executing program 5: 08:51:49 executing program 4: 08:51:49 executing program 2: 08:51:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:49 executing program 1: 08:51:49 executing program 5: 08:51:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:51:49 executing program 1: 08:51:49 executing program 4: 08:51:49 executing program 2: [ 622.122949][T22570] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 622.158554][T22570] REISERFS (device loop0): using ordered data mode [ 622.190933][T22570] reiserfs: using flush barriers 08:51:49 executing program 5: [ 622.241534][T22570] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 622.350093][T22570] REISERFS (device loop0): checking transaction log (loop0) [ 622.370153][T22570] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=3932 rdkey [ 622.397328][T22570] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 622.422107][T22570] REISERFS (device loop0): Remounting filesystem read-only [ 622.449624][T22570] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 622.464772][T22570] REISERFS (device loop0): Using rupasov hash to sort names 08:51:50 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:50 executing program 1: 08:51:50 executing program 4: 08:51:50 executing program 2: 08:51:50 executing program 5: 08:51:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:50 executing program 2: 08:51:50 executing program 5: 08:51:50 executing program 1: 08:51:50 executing program 4: [ 622.741295][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 622.771060][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 622.780024][T22594] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 622.812323][T22594] REISERFS (device loop0): using ordered data mode [ 622.828740][ T3925] loop1: p2 < > [ 622.849724][T22594] reiserfs: using flush barriers 08:51:50 executing program 4: 08:51:50 executing program 5: [ 622.888276][T22594] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 623.014746][T22594] REISERFS (device loop0): checking transaction log (loop0) [ 623.057281][T22594] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 623.092156][T22594] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 623.116847][T22594] REISERFS (device loop0): Remounting filesystem read-only [ 623.133481][T22594] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 08:51:50 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:50 executing program 4: 08:51:50 executing program 2: 08:51:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:50 executing program 1: 08:51:50 executing program 5: [ 623.241099][T22594] REISERFS (device loop0): Using rupasov hash to sort names 08:51:50 executing program 4: 08:51:51 executing program 5: 08:51:51 executing program 1: 08:51:51 executing program 2: 08:51:51 executing program 4: [ 623.557153][T22619] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 623.580052][T22619] REISERFS (device loop0): using ordered data mode [ 623.623224][T22619] reiserfs: using flush barriers [ 623.639259][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 623.649711][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 623.657044][ T3925] loop1: p2 < > 08:51:51 executing program 5: [ 623.678300][T22619] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 623.780949][T22619] REISERFS (device loop0): checking transaction log (loop0) [ 623.828779][T22619] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 623.868519][T22619] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 623.884104][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 623.905536][T22619] REISERFS (device loop0): Remounting filesystem read-only [ 623.913839][T22619] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 623.920164][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 623.940366][T22619] REISERFS (device loop0): Using rupasov hash to sort names [ 623.955885][ T3925] loop1: p2 < > 08:51:51 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:51 executing program 1: 08:51:51 executing program 2: 08:51:51 executing program 4: 08:51:51 executing program 5: 08:51:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 624.049793][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 624.060506][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 624.067508][ T3925] loop1: p2 < > 08:51:51 executing program 2: 08:51:51 executing program 5: 08:51:51 executing program 1: 08:51:51 executing program 4: [ 624.277250][T22650] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:51 executing program 1: [ 624.335251][T22650] REISERFS (device loop0): using ordered data mode [ 624.394449][T22650] reiserfs: using flush barriers 08:51:52 executing program 2: [ 624.442080][T22650] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 624.546757][T22650] REISERFS (device loop0): checking transaction log (loop0) [ 624.566490][T22650] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 624.590004][T22650] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 624.612180][T22650] REISERFS (device loop0): Remounting filesystem read-only [ 624.636869][T22650] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 624.674977][T22650] REISERFS (device loop0): Using rupasov hash to sort names 08:51:52 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:52 executing program 5: 08:51:52 executing program 4: 08:51:52 executing program 1: 08:51:52 executing program 2: 08:51:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 624.755964][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 624.767488][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 624.775866][ T3925] loop1: p2 < > 08:51:52 executing program 1: 08:51:52 executing program 2: 08:51:52 executing program 5: 08:51:52 executing program 4: 08:51:52 executing program 2: 08:51:52 executing program 1: [ 625.031655][T22679] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 625.066910][T22679] REISERFS (device loop0): using ordered data mode [ 625.099161][T22679] reiserfs: using flush barriers [ 625.139996][T22679] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 625.161688][T22679] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:52 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:52 executing program 5: 08:51:52 executing program 1: 08:51:52 executing program 4: 08:51:52 executing program 2: 08:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:53 executing program 5: 08:51:53 executing program 1: 08:51:53 executing program 4: 08:51:53 executing program 2: [ 625.547383][T22693] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 625.569797][T22693] REISERFS (device loop0): using ordered data mode 08:51:53 executing program 2: [ 625.608073][T22693] reiserfs: using flush barriers 08:51:53 executing program 1: [ 625.639369][T22693] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 625.668530][T22693] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:53 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:53 executing program 5: 08:51:53 executing program 4: 08:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:53 executing program 2: [ 625.793402][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 625.814517][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 625.821543][ T3925] loop1: p2 < > 08:51:53 executing program 1: 08:51:53 executing program 5: 08:51:53 executing program 4: 08:51:53 executing program 2: 08:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 626.012403][T22722] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 626.047630][T22722] REISERFS (device loop0): using ordered data mode [ 626.064248][T22722] reiserfs: using flush barriers [ 626.070610][T22722] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 626.102071][T22722] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:53 executing program 2: 08:51:53 executing program 1: 08:51:53 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {0x0, 0x0, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:53 executing program 4: 08:51:53 executing program 5: 08:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:53 executing program 2: 08:51:53 executing program 1: 08:51:54 executing program 4: 08:51:54 executing program 5: 08:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:54 executing program 1: 08:51:54 executing program 2: [ 626.538102][T22745] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:54 executing program 1: [ 626.600063][T22745] REISERFS (device loop0): using ordered data mode [ 626.635243][T22745] reiserfs: using flush barriers [ 626.652852][T22745] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 626.686025][T22745] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:54 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {0x0, 0x0, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:54 executing program 4: 08:51:54 executing program 5: 08:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:54 executing program 1: 08:51:54 executing program 2: 08:51:54 executing program 2: 08:51:54 executing program 5: 08:51:54 executing program 1: 08:51:54 executing program 4: 08:51:54 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 627.115757][T22765] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 627.141101][T22765] REISERFS (device loop0): using ordered data mode 08:51:54 executing program 1: [ 627.180810][T22765] reiserfs: using flush barriers [ 627.232015][T22765] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 627.261404][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 627.285381][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 627.307234][ T3925] loop1: p2 < > [ 627.311382][T22765] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:55 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {0x0, 0x0, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:55 executing program 2: 08:51:55 executing program 1: 08:51:55 executing program 4: 08:51:55 executing program 5: [ 627.433367][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 627.445774][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 627.452866][ T3925] loop1: p2 < > 08:51:55 executing program 4: 08:51:55 executing program 2: 08:51:55 executing program 5: 08:51:55 executing program 1: 08:51:55 executing program 4: [ 627.715845][T22792] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 627.748035][T22792] REISERFS (device loop0): using ordered data mode 08:51:55 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 627.761535][T22792] reiserfs: using flush barriers [ 627.769041][T22792] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:51:55 executing program 5: [ 627.865861][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 627.878865][T22792] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 627.930987][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 627.957578][ T3925] loop1: p2 < > 08:51:55 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200), 0x0, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:55 executing program 2: 08:51:55 executing program 1: 08:51:55 executing program 4: 08:51:55 executing program 5: 08:51:55 executing program 1: 08:51:55 executing program 4: 08:51:55 executing program 2: 08:51:55 executing program 5: [ 628.266178][T22816] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 628.305555][T22816] REISERFS (device loop0): using ordered data mode 08:51:55 executing program 2: [ 628.339435][T22816] reiserfs: using flush barriers [ 628.379143][T22816] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:51:56 executing program 3: r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:56 executing program 1: [ 628.441559][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 628.463121][T22816] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 628.484213][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 628.507317][ T3925] loop1: p2 < > 08:51:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200), 0x0, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:56 executing program 4: 08:51:56 executing program 5: 08:51:56 executing program 2: 08:51:56 executing program 1: 08:51:56 executing program 5: 08:51:56 executing program 2: 08:51:56 executing program 1: 08:51:56 executing program 4: 08:51:56 executing program 4: [ 628.978609][T22840] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 629.021783][T22840] REISERFS (device loop0): using ordered data mode [ 629.029960][T22840] reiserfs: using flush barriers [ 629.040540][T22840] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:51:56 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:56 executing program 4: [ 629.073016][T22840] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200), 0x0, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:56 executing program 1: 08:51:56 executing program 5: 08:51:56 executing program 2: 08:51:56 executing program 4: 08:51:56 executing program 2: 08:51:56 executing program 1: 08:51:56 executing program 5: [ 629.436625][T22862] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:51:57 executing program 2: 08:51:57 executing program 1: [ 629.483038][T22862] REISERFS (device loop0): using ordered data mode [ 629.536220][T22862] reiserfs: using flush barriers [ 629.590350][T22862] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 629.683346][T22862] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:57 executing program 4: 08:51:57 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000", 0x11, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:57 executing program 1: 08:51:57 executing program 5: 08:51:57 executing program 2: 08:51:57 executing program 4: 08:51:57 executing program 5: 08:51:57 executing program 2: 08:51:57 executing program 1: 08:51:57 executing program 5: [ 630.173006][T22884] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 630.209121][T22884] REISERFS (device loop0): using ordered data mode 08:51:57 executing program 4: [ 630.250693][T22884] reiserfs: using flush barriers [ 630.290317][T22884] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:51:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:57 executing program 2: [ 630.376035][T22884] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:58 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000", 0x11, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:58 executing program 5: 08:51:58 executing program 1: 08:51:58 executing program 4: 08:51:58 executing program 2: [ 630.518316][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 630.531340][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 630.538407][ T3925] loop1: p2 < > 08:51:58 executing program 1: 08:51:58 executing program 4: 08:51:58 executing program 5: 08:51:58 executing program 2: [ 630.742784][T22912] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 630.770999][T22912] REISERFS (device loop0): using ordered data mode [ 630.803450][T22912] reiserfs: using flush barriers 08:51:58 executing program 4: [ 630.858085][T22912] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:51:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:58 executing program 2: [ 630.930691][T22912] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:51:58 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000", 0x11, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:58 executing program 5: 08:51:58 executing program 1: 08:51:58 executing program 4: 08:51:58 executing program 2: [ 631.036685][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 631.054113][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 631.063331][ T3925] loop1: p2 < > 08:51:58 executing program 5: 08:51:58 executing program 1: 08:51:58 executing program 4: 08:51:58 executing program 2: [ 631.317177][T22936] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 631.338120][T22936] REISERFS (device loop0): using ordered data mode [ 631.354777][T22936] reiserfs: using flush barriers 08:51:58 executing program 5: [ 631.367992][T22936] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:51:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:59 executing program 1: [ 631.479739][T22936] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 631.534031][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 631.582014][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 631.608838][ T3925] loop1: p2 < > 08:51:59 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004", 0x1a, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:51:59 executing program 5: 08:51:59 executing program 4: 08:51:59 executing program 2: 08:51:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:51:59 executing program 1: 08:51:59 executing program 2: 08:51:59 executing program 4: 08:51:59 executing program 5: 08:51:59 executing program 2: 08:51:59 executing program 4: 08:51:59 executing program 5: [ 632.091113][T22969] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 632.118527][T22969] REISERFS (device loop0): using ordered data mode [ 632.183251][T22969] reiserfs: using flush barriers [ 632.233013][T22969] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 632.307556][T22969] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:00 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004", 0x1a, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:00 executing program 1: 08:52:00 executing program 5: 08:52:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:00 executing program 2: 08:52:00 executing program 4: 08:52:00 executing program 2: 08:52:00 executing program 1: 08:52:00 executing program 4: 08:52:00 executing program 5: [ 632.686096][T22990] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 632.695652][T22990] REISERFS (device loop0): using ordered data mode [ 632.702358][T22990] reiserfs: using flush barriers [ 632.709939][T22990] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:52:00 executing program 2: [ 632.744821][T22990] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:00 executing program 1: 08:52:00 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004", 0x1a, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:00 executing program 5: 08:52:00 executing program 4: 08:52:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:00 executing program 2: 08:52:00 executing program 1: 08:52:00 executing program 4: 08:52:00 executing program 2: 08:52:00 executing program 5: [ 633.089755][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 633.123985][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 633.131603][ T3925] loop1: p2 < > [ 633.177117][T23007] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:52:00 executing program 5: [ 633.259114][T23007] REISERFS (device loop0): using ordered data mode [ 633.337714][T23007] reiserfs: using flush barriers 08:52:00 executing program 2: 08:52:00 executing program 4: [ 633.409179][T23007] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 633.434131][T23007] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:01 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d0000000400007356", 0x1e, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:01 executing program 1: 08:52:01 executing program 5: [ 633.670132][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 633.753769][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 633.760664][ T3925] loop1: p2 < > 08:52:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:01 executing program 2: 08:52:01 executing program 4: 08:52:01 executing program 5: 08:52:01 executing program 1: [ 633.823167][T23033] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 633.843659][T23033] REISERFS (device loop0): using ordered data mode [ 633.850182][T23033] reiserfs: using flush barriers [ 633.876460][T23033] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 5673 (device loop0) does not match to magic found in super block 384d5673 08:52:01 executing program 4: [ 633.922258][T23033] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:01 executing program 1: 08:52:01 executing program 5: 08:52:01 executing program 2: 08:52:01 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d0000000400007356", 0x1e, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:01 executing program 4: 08:52:01 executing program 1: [ 634.278432][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 634.301856][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 634.321324][ T3925] loop1: p2 < > [ 634.360160][T23056] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 634.399499][T23056] REISERFS (device loop0): using ordered data mode 08:52:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:01 executing program 5: 08:52:01 executing program 2: 08:52:01 executing program 4: 08:52:01 executing program 1: [ 634.434734][T23056] reiserfs: using flush barriers 08:52:02 executing program 5: [ 634.469002][T23056] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 5673 (device loop0) does not match to magic found in super block 384d5673 [ 634.533123][T23056] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:02 executing program 1: 08:52:02 executing program 5: 08:52:02 executing program 5: 08:52:02 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d0000000400007356", 0x1e, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:02 executing program 4: 08:52:02 executing program 2: 08:52:02 executing program 1: 08:52:02 executing program 4: 08:52:02 executing program 2: 08:52:02 executing program 1: 08:52:02 executing program 5: [ 634.867065][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 634.877809][T23078] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:52:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:02 executing program 4: [ 634.909371][T23078] REISERFS (device loop0): using ordered data mode [ 634.934308][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 634.946648][T23078] reiserfs: using flush barriers [ 634.971893][ T3925] loop1: p2 < > [ 634.976846][T23078] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 5673 (device loop0) does not match to magic found in super block 384d5673 08:52:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 635.077517][T23078] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:02 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d38", 0x20, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:02 executing program 2: 08:52:02 executing program 4: 08:52:02 executing program 5: 08:52:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:02 executing program 1: 08:52:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:02 executing program 2: 08:52:02 executing program 5: [ 635.270216][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 635.306526][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 08:52:02 executing program 1: 08:52:02 executing program 4: [ 635.350165][ T3925] loop1: p2 < > 08:52:03 executing program 5: [ 635.394932][T23102] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 635.430200][T23102] REISERFS (device loop0): using ordered data mode [ 635.468887][T23102] reiserfs: using flush barriers [ 635.510898][T23102] REISERFS warning (device loop0): sh-463 check_advise_trans_params: bad transaction max batch (0). FSCK? [ 635.614501][T23102] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 635.649573][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:52:03 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d38", 0x20, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:03 executing program 2: 08:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:03 executing program 5: 08:52:03 executing program 1: 08:52:03 executing program 4: [ 635.659666][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 635.671468][ T3925] loop1: p2 < > 08:52:03 executing program 1: 08:52:03 executing program 5: 08:52:03 executing program 4: 08:52:03 executing program 2: 08:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:03 executing program 5: [ 635.894906][T23129] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 635.929466][T23129] REISERFS (device loop0): using ordered data mode [ 636.009204][T23129] reiserfs: using flush barriers [ 636.056183][T23129] REISERFS warning (device loop0): sh-463 check_advise_trans_params: bad transaction max batch (0). FSCK? [ 636.076889][T23129] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:03 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d38", 0x20, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:03 executing program 2: 08:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:03 executing program 4: 08:52:03 executing program 1: 08:52:03 executing program 5: [ 636.152631][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 636.169926][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 636.209204][ T3925] loop1: p2 < > 08:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:03 executing program 4: 08:52:03 executing program 1: 08:52:03 executing program 2: 08:52:03 executing program 5: [ 636.355386][T23155] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:52:04 executing program 5: [ 636.407560][T23155] REISERFS (device loop0): using ordered data mode [ 636.440633][T23155] reiserfs: using flush barriers [ 636.481936][T23155] REISERFS warning (device loop0): sh-463 check_advise_trans_params: bad transaction max batch (0). FSCK? [ 636.505901][T23155] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:04 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d3884", 0x21, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:04 executing program 4: 08:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:04 executing program 1: 08:52:04 executing program 2: 08:52:04 executing program 5: [ 636.625412][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 636.653573][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 636.681856][ T3925] loop1: p2 < > 08:52:04 executing program 1: 08:52:04 executing program 4: 08:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:04 executing program 5: 08:52:04 executing program 2: [ 636.820891][T23182] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 636.830570][T23182] REISERFS (device loop0): using ordered data mode [ 636.839249][T23182] reiserfs: using flush barriers [ 636.846393][T23182] REISERFS warning (device loop0): sh-463 check_advise_trans_params: bad transaction max batch (132). FSCK? [ 636.859367][T23182] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:04 executing program 1: 08:52:04 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d3884", 0x21, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:04 executing program 4: 08:52:04 executing program 5: 08:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:04 executing program 1: 08:52:04 executing program 2: 08:52:04 executing program 4: 08:52:04 executing program 1: [ 637.128111][T23203] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 637.146258][T23203] REISERFS (device loop0): using ordered data mode [ 637.169832][T23203] reiserfs: using flush barriers 08:52:04 executing program 5: 08:52:04 executing program 2: [ 637.196200][T23203] REISERFS warning (device loop0): sh-463 check_advise_trans_params: bad transaction max batch (132). FSCK? 08:52:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 637.255219][T23203] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:04 executing program 4: 08:52:04 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d3884", 0x21, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:04 executing program 5: 08:52:05 executing program 1: 08:52:05 executing program 2: 08:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:05 executing program 5: 08:52:05 executing program 4: 08:52:05 executing program 1: [ 637.659565][T23226] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 637.677635][T23226] REISERFS (device loop0): using ordered data mode 08:52:05 executing program 1: 08:52:05 executing program 2: [ 637.732033][T23226] reiserfs: using flush barriers 08:52:05 executing program 1: 08:52:05 executing program 5: [ 637.785720][T23226] REISERFS warning (device loop0): sh-463 check_advise_trans_params: bad transaction max batch (132). FSCK? [ 637.861042][T23226] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:05 executing program 4: 08:52:05 executing program 1: 08:52:05 executing program 2: 08:52:05 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:05 executing program 5: 08:52:05 executing program 2: 08:52:05 executing program 4: 08:52:05 executing program 5: 08:52:05 executing program 1: 08:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 638.302065][T23255] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal 08:52:05 executing program 2: 08:52:05 executing program 4: [ 638.357360][T23255] REISERFS (device loop0): using ordered data mode 08:52:06 executing program 5: [ 638.429406][T23255] reiserfs: using flush barriers 08:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 638.488784][T23255] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:52:06 executing program 1: [ 638.606556][T23255] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:06 executing program 2: 08:52:06 executing program 5: 08:52:06 executing program 4: 08:52:06 executing program 1: 08:52:06 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:06 executing program 1: 08:52:06 executing program 5: 08:52:06 executing program 4: [ 638.883070][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 08:52:06 executing program 2: [ 638.932279][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 638.970319][T23290] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 638.979992][ T3925] loop1: p2 < > 08:52:06 executing program 4: 08:52:06 executing program 5: 08:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 639.048034][T23290] REISERFS (device loop0): using ordered data mode [ 639.071385][T23290] reiserfs: using flush barriers 08:52:06 executing program 2: [ 639.105984][T23290] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 08:52:06 executing program 1: 08:52:06 executing program 5: [ 639.219754][T23290] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space 08:52:06 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000010100)="0000000000000000000000000100000003", 0x11, 0x100c0}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:06 executing program 4: 08:52:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:06 executing program 2: 08:52:06 executing program 5: 08:52:06 executing program 1: [ 639.378799][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 639.408762][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 639.428564][ T3925] loop1: p2 < > 08:52:07 executing program 2: 08:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:07 executing program 5: 08:52:07 executing program 4: 08:52:07 executing program 1: 08:52:07 executing program 2: [ 639.666753][T23326] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 639.694734][T23326] REISERFS (device loop0): using ordered data mode [ 639.741481][T23326] reiserfs: using flush barriers [ 639.786597][T23326] REISERFS warning (device loop0): sh-460 journal_init: journal header magic 0 (device loop0) does not match to magic found in super block 384d5673 [ 639.861440][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 639.878102][T23326] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 639.885541][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 639.896450][ T3925] loop1: p2 < > 08:52:07 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc0302000100526549734572334673000000020000000200010002", 0x49, 0x10000}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f", 0x46, 0x3d97000}, {&(0x7f0000000300)="000000000100000001d46e991406000428000400020000000000000001000000200004002e2e0000000000002e00000000000000ed41000003", 0x39, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 08:52:07 executing program 2: 08:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:07 executing program 4: 08:52:07 executing program 1: 08:52:07 executing program 5: [ 639.977661][ T3925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 640.032194][ T3925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 640.067985][ T3925] loop1: p2 < > 08:52:07 executing program 2: 08:52:07 executing program 5: 08:52:07 executing program 1: 08:52:07 executing program 4: 08:52:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x6df3c3b1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x7f, @mcast2}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x7, [0x1, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x629]}, 0x5c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:52:07 executing program 1: [ 640.220486][T23356] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 640.230330][T23356] REISERFS (device loop0): using ordered data mode [ 640.238775][T23356] reiserfs: using flush barriers [ 640.248419][T23356] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 640.300306][T23356] REISERFS (device loop0): checking transaction log (loop0) [ 640.325716][T23356] REISERFS (device loop0): Using rupasov hash to sort names [ 640.336689][T23356] ------------[ cut here ]------------ [ 640.342887][T23356] WARNING: CPU: 1 PID: 23356 at fs/inode.c:996 unlock_new_inode+0x237/0x290 [ 640.352823][T23356] Kernel panic - not syncing: panic_on_warn set ... [ 640.359428][T23356] CPU: 1 PID: 23356 Comm: syz-executor.0 Not tainted 5.9.0-rc7-syzkaller #0 [ 640.368103][T23356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.378216][T23356] Call Trace: [ 640.381587][T23356] dump_stack+0x198/0x1fd [ 640.385937][T23356] panic+0x382/0x7fb [ 640.389838][T23356] ? __warn_printk+0xf3/0xf3 [ 640.394457][T23356] ? printk+0xba/0xed [ 640.398474][T23356] ? log_store.cold+0x16/0x16 [ 640.403165][T23356] ? __warn.cold+0x5/0x4b [ 640.407538][T23356] ? unlock_new_inode+0x237/0x290 [ 640.412576][T23356] __warn.cold+0x20/0x4b [ 640.416830][T23356] ? unlock_new_inode+0x237/0x290 [ 640.421866][T23356] report_bug+0x1bd/0x210 [ 640.426280][T23356] handle_bug+0x38/0x90 [ 640.430476][T23356] ? lock_release+0x8f0/0x8f0 [ 640.435163][T23356] exc_invalid_op+0x14/0x40 [ 640.439723][T23356] asm_exc_invalid_op+0x12/0x20 [ 640.444585][T23356] RIP: 0010:unlock_new_inode+0x237/0x290 [ 640.450223][T23356] Code: 44 0f bf 83 72 01 00 00 48 8d 95 c8 00 00 00 31 c9 4c 89 e7 48 c7 c6 80 b0 97 88 e8 13 27 93 ff e9 22 fe ff ff e8 29 3a ad ff <0f> 0b e9 6d fe ff ff 48 89 df e8 1a 10 ee ff e9 ea fd ff ff 4c 89 [ 640.469931][T23356] RSP: 0018:ffffc9001594f668 EFLAGS: 00010212 [ 640.476012][T23356] RAX: 0000000000036a02 RBX: ffff88808804f4d0 RCX: ffffc900061c9000 [ 640.483992][T23356] RDX: 0000000000040000 RSI: ffffffff81c90467 RDI: 0000000000000007 [ 640.491968][T23356] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000003 [ 640.499950][T23356] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808804f5a8 [ 640.507930][T23356] R13: ffff88808804f558 R14: 0000000000000000 R15: 00000000fffffff4 [ 640.515935][T23356] ? unlock_new_inode+0x237/0x290 [ 640.520970][T23356] ? unlock_new_inode+0x237/0x290 [ 640.526034][T23356] reiserfs_new_inode+0x3b8/0x2130 [ 640.531190][T23356] ? do_journal_begin_r+0x8a4/0x10d0 [ 640.536499][T23356] ? reiserfs_fh_to_parent+0x1b0/0x1b0 [ 640.541974][T23356] ? mutex_lock_io_nested+0xf60/0xf60 [ 640.547362][T23356] ? mutex_lock_io_nested+0xf60/0xf60 [ 640.552752][T23356] ? __mutex_unlock_slowpath+0xe2/0x610 [ 640.558307][T23356] ? wait_for_completion+0x260/0x260 [ 640.563602][T23356] ? wait_for_completion+0x260/0x260 [ 640.568920][T23356] ? do_journal_begin_r+0xd2e/0x10d0 [ 640.574292][T23356] ? security_old_inode_init_security+0xf4/0x130 [ 640.580642][T23356] reiserfs_mkdir+0x4ad/0x980 [ 640.585332][T23356] ? reiserfs_mknod+0x700/0x700 [ 640.590209][T23356] ? down_write_killable+0x170/0x170 [ 640.595502][T23356] ? down_write_killable+0x170/0x170 [ 640.600805][T23356] reiserfs_xattr_init+0x4de/0xb52 [ 640.606015][T23356] reiserfs_fill_super+0x215d/0x2df3 [ 640.611316][T23356] ? reiserfs_remount+0x1580/0x1580 [ 640.616522][T23356] ? lock_downgrade+0x830/0x830 [ 640.621385][T23356] ? snprintf+0xbb/0xf0 [ 640.625560][T23356] ? wait_for_completion+0x260/0x260 [ 640.630847][T23356] ? set_blocksize+0x1c1/0x400 [ 640.635651][T23356] mount_bdev+0x32e/0x3f0 [ 640.639986][T23356] ? reiserfs_remount+0x1580/0x1580 [ 640.645199][T23356] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 640.650325][T23356] legacy_get_tree+0x105/0x220 [ 640.655108][T23356] vfs_get_tree+0x89/0x2f0 [ 640.659546][T23356] path_mount+0x1387/0x20a0 [ 640.664058][T23356] ? strncpy_from_user+0x2bf/0x3e0 [ 640.669173][T23356] ? copy_mount_string+0x40/0x40 [ 640.674162][T23356] ? getname_flags.part.0+0x1dd/0x4f0 [ 640.679554][T23356] __x64_sys_mount+0x27f/0x300 [ 640.684324][T23356] ? copy_mnt_ns+0xa60/0xa60 [ 640.688933][T23356] ? check_preemption_disabled+0x50/0x130 [ 640.694664][T23356] ? syscall_enter_from_user_mode+0x1d/0x60 [ 640.700576][T23356] do_syscall_64+0x2d/0x70 [ 640.704999][T23356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 640.710894][T23356] RIP: 0033:0x4607ea [ 640.714796][T23356] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 640.735205][T23356] RSP: 002b:00007f0257a7aa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 640.743630][T23356] RAX: ffffffffffffffda RBX: 00007f0257a7ab20 RCX: 00000000004607ea [ 640.751626][T23356] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0257a7aae0 [ 640.759624][T23356] RBP: 00007f0257a7aae0 R08: 00007f0257a7ab20 R09: 0000000020000000 [ 640.767603][T23356] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 640.775577][T23356] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020011500 [ 640.785276][T23356] Kernel Offset: disabled [ 640.789902][T23356] Rebooting in 86400 seconds..