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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:13:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) open_by_handle_at(r1, &(0x7f0000000000)=@reiserfs_3={0xc, 0x3, {0x1, 0xffffff01, 0x8}}, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:13:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003e80)={0x0}, &(0x7f0000003ec0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003f00)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000004000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004040)={0x0, 0x0, 0x0}, &(0x7f0000004080)=0xc) r12 = accept$inet6(0xffffffffffffffff, &(0x7f00000040c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000004100)=0x1c) r13 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r14 = openat$cgroup_int(r13, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r14, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000003e00)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="98020000250000012abd7000fcdbdf25690133808200550081ab38a636cdf2394e22fd31c6cfd5883184840b0d697754808dac4b644ef6ee161c20ee5195c879019e0136454a0eb7ca7372f7024c6c9dcdb742433e42e80ce74f47f399ede9c1e7c28b77e5f0ef96f1542a3f7c7df5cb17a019153feebab1ceb18b194e27c4a3b3e9881c92a0f7ea3d313fe21cdf345762d3b56298f2000008004300", @ANYRES32=0xee01, @ANYBLOB="08001000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="d1003a0080"], 0x298}, {&(0x7f00000005c0)={0x36c, 0x36, 0x290, 0x70bd28, 0x1ad, "", [@generic="2ead88413bf13cf9b96faa0ee9edf99b5ee3c9afa88efe1935adb1bdcfe94e72d52f8940f429ea110d3f98949aa07b50bc3009eeb608eddecdfe6c4c92edae996f58d98f7659a83f139f6b74087de3b7a96637e7e338e5ca94b31e17e1576de3be5d34b1381ec26f3f0580f91eecc5a348eea3bf44b38775ad56db29613e51c38684634c567ea0e4d5b4267b2f29307c33d4d26ff9db1ebb09e47a48ed38c0beb2bd3c337eba48e326904fa65ae4cba272e2c31e76c0ec56680f", @nested={0x137, 0x77, 0x0, 0x1, [@typed={0xc8, 0x4c, 0x0, 0x0, @binary="387a30ea8eabac636bb92f52b54d0759f8d9d63b64e91b47b367ceb716fd1cdedf211beed86b47468564236b23382e31a2865dbc1234859d5a024d9ae7572af8a9c626c0f07f24df72c25f75ce456edbcc37f269224624a7dc6095707b3b3649ef498785e749f41b0457717315bf641ba28f2734c497cfc35f746c765ae1a737e1cc81ec8d5740029695612eac7af240fc262848ac62c251ab4bd5b0f2886ea826ac9cd15936c33b910f5d1a51098f1624a8ced14aac0c21d16a3b2c50bc336d9b3faf24"}, @generic="3a729b5e10eabba2b2a605e5405860caf8ec738aeb31f49507db22bcd5e74952cc0065f517d6644f8e37ef4f26d233c7b3b7a356c756481daf3b3e601a10bdb6a5a157237c2be4d8872eba123409a8436e9b0f72eb8c82ceba09ecdeec36eb44eea6c838f5a5b4516c4607"]}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x8000}, @nested={0xf8, 0x10, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="d421d011f64b9e51f046dbf2066ba1cc0640c949349c447b63f8d11963dbdaf0f5cdb3cdba7f5231898e2f781cbebde546c6eb1180835bc90b5dbcefa4b52762e10f740f7a342322c7b7f8e91bd686e267765bd02cb0d86b0d3a9904dbb1bbaf18aa786e6358e9c5bf150cfc11985863a81f49506fe81e2a45c547d29fdb98709a985e6f422165d031e71fe32db3c94a62c156e0683f92a4aee4ba95a80316ad9da501fb9406047a2adb2ba39e9c4f201415418b", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @typed={0x8, 0x3c, 0x0, 0x0, @uid}, @typed={0x8, 0x3c, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x54, 0x66, 0x0, 0x1, [@typed={0x6, 0x7, 0x0, 0x0, @str='{\x00'}, @typed={0x4, 0x2c}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x21}, @generic="f9f817c2352e79fdf5c5828359ce2e2c54fd9f15", @typed={0x8, 0x52, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}, @typed={0x8, 0x79, 0x0, 0x0, @pid}]}, @typed={0x5, 0x32, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}]}, 0x36c}, {&(0x7f0000000040)={0x24, 0x40, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x86, 0x0, 0x0, @u64}, @typed={0x8, 0x8a, 0x0, 0x0, @pid}]}, 0x24}, {&(0x7f0000000200)={0x98, 0x38, 0x8, 0x70bd28, 0x25dfdbfe, "", [@generic="a2028811f656f98ff0809a885c2a8ff4112e593bab753e847aa8feb11391886d35a98e08a19d82f1f20e877b8d6bd2f0edd9c8e2e3b40eaad7ce86418f8132741366d90528ebc6c1011002e6b57ad6838e4f67331713d3ea95e09a0daa8a6a9f2a0d", @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@broadcast}]}, 0x98}, {&(0x7f0000000940)={0x324, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @generic="fd7bbb5c65a84b428c2a68cdbe883e2b9b2e1949f5664c8ebb15e90a26c018ab266623f472a914e9a2f45aff232e7980c627136db71d0b92e09936b8aba82c62987e151a19e48a38da0ef26807e6c06c9a455fd02a7f6d10d7371b8477ff0aa11f896557cdc52a59d5a251471b2d1ac3f9755394e38505881815585a1639ee1467cb315d38fa8e3d77b274cec5749f271d0c360cd5bf2d69e4ab", @nested={0x1c3, 0x73, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@empty}, @generic="66f8f1b2854598e2ad377fbf4d70c73af374670b8392f2d738a1964907228259f4844d99f7b5441eda752d0cdacaae5672bf7498ef2c103847527ebc56a7fc4d982a50b2b72a1359ddfe82dd2ef5b22f19e180e885159e300d36c1a9866c0962494d41051402066d7e015d2b926c9d36fb2c93403d3ef054618c222ffc0063c1277cdcd4f1656679b0e050fa11eff20b318f86b92b7ed1e72eb6191ec72a8219c10adde6c3f17de50f1e61eed31b59f4e12ae572a0aceeb9a8eb57f7deb470816a56b052982b0a44d444ef9454935fac12da074e235479c4ce81797aa7c201c9209548032cb9bc5a65466ac94e17e57ddffe206a88", @generic="a73c94174df4775691def8824489f6cf36055297bb5b560ece2fdad46794f070b134790f4080e5daa1cc7990f74954f4e83b884bc3dea511a85cb765accb9fd9fe7582d8964569d863176769d4cdf4744c57adab4329f79e96b5f11014a10a3f83dd6111648e46c92710108c2bfb3a9755a9ed75f8fcb99ae84629e0e91b2dc92b9a2b1a41b111f6c23b3c9d33c47ba0415a39676857afb9845c00183c1d65520a23"]}, @nested={0x4, 0xc}, @typed={0x8, 0x50, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x9f, 0x34, 0x0, 0x1, [@generic="878a4fe214a80e86715f7a9895d70dce5e2a0ba47a8def97c1b72cddc22df3ecd85c2f87b637895f3b135c4729f0c0c8703c91f475e9be6ad4f0366ee236cce694e1c69ef4ef58c13210edeca926c17e88cda20c28911c8c86d0c3223f2c67d563a40ca2e47ff9edae689df211ada138bd612dffd6555f0f3c2f8f4af6666e69dcd5cadebb0230eee2b72db9c844be", @typed={0x9, 0x65, 0x0, 0x0, @str='/!+.\x00'}]}]}, 0x324}, {&(0x7f0000000c80)={0x2a90, 0x11, 0x10, 0x70bd25, 0x25dfdbff, "", [@nested={0x1375, 0x74, 0x0, 0x1, [@generic="0e64a547e4d50eb843507642518d0050eb88dc064f46777a44a29e183212a5fb0e66560ffe7410134538bf2b942c44d88fa4b53debab16dbcd78deb06f36d80b86d421a11472acff33c4a3bb84cb880187b3c35e6c48e61e6aa9435d3dd056508abe2d1d5106d684b9ee21a113d7d891852de51899c8a96d92839b6e894ce63775a29257435a7859a993117650172671", @generic="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", @generic="cb8e097bd5135df8cbc7fff1522e26028c137b50eca676847e53e2a36a1cc45380245723cfdb788d8f3acff3e07d22f680f73cb87c807d0edd42eba5cc1ee93d350eaadeece890f81c439074a3", @generic="89f234466d74b5cea87d28603540ac2ab211d5bfb220b218f1a41641c261ec7c05171e6e3f0f402bfb8a31403394381d673111cf03a096275904f20a09151372e44fb859941898172ceda4da779ae4f20c36de5c039caede3fae26702570fe8fd49e1a9aec88883528cfea3037c95e15044b3b0b0a3b3e8fb2627e023b13c3506e7ed71040dd5761138f9a84e46e5e52d9d817177835f7618092de757d7c1788f4f5b72988f72c29c524cb8a2bb244ed14807ddd18bb4e06c8894bc0715964bbf3e1565936716463f45b3cc3", @generic="2147d3e4983221c228f80446ec14b6716f15cf265a331064511d63737cac4029aca42a5d74d6d541789ba7816abd43f6ac62c189dc2dcccbda65626b56d812c5c9735d2d2058759496f4518f420808d5ed8e21702df9488c8c598240812f738d0ef6379b9c609040af5cde35277fc840ceec7b11bea081538cbca696b19eddee2f8b8d0602a0a5f5369917c68e80d98b7039b2985c8c1bb44de286d17fefabe463759ae2b9187ef19790c50910c55c85ba4c29ce6c5ef32ff693a7a8d8e8ff35755cd4b8f17f9a1398738b1762fb56197b4fc6e512fe7919", @generic="a0a119ea693c126218e0d4f7d459385cf441451a87aea8c9e0b3abe89417e908f4bb6a1293988bf7227ba035041447ac337e0e9339a7b74afba28bbf3f8d4247b0e1a09fa48db74269626444f8d082dc59c3867eee5f48ad16d562e43f5ccabf795d020d91c23a6b3d5fef8bc496a16554bd84ff1452dcefad1ac7cef912ead7f5f95ecc5b5612e544400872d5", @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x7}, @generic="baaa7721c0d3737655739eb3c278fcce2d043d810f714b7c3f34a6f2f8c893e0dc27e97a940922c958a9ed21c2053da4fe7aeceb5ef9d10df41b88fb85b2b2edfb7119c5152d4d"]}, @typed={0x8, 0x47, 0x0, 0x0, @pid}, @nested={0x6c, 0xd, 0x0, 0x1, [@generic="5c2cfc28238d2b0ba42f8cfae3d5eaeeea78477a670a30cf2e62021662086358f89617a4e23017ed6de51380ce6173d88320bf1f21bd2d5eb72799826e6bf159916ebdf44d668575ca6b03dfc68a2e91b1eb08e61680eab667c884a490c573d054efb9f2de28e65c"]}, @typed={0x8, 0x87, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x20b, 0x47, 0x0, 0x1, [@generic="fe0e3862a6c7ed5e573ac572b241453d156738657387ca720bdfd33aa3f34b0d841dd54fe12ce90b", @generic="43048104a41b925ff23c6b9308cb8d293379f8076eea1e21163069b3090706cb57e98505e5cc6668fd1c99536081d82e9137508fdb2bfca7cb17cdf2004e4c574da6e569885081d74a8aaf0363fa3ae03e64ed71f67aefd8bee715825af3bdc132335387915e7cb6c85034de1ee10bee233ff22f05a3bfd6cf5488fd6c910aa2bc452b6e07e834d965e05fedf141df4dc0c2d618c7f43afb9a4e3fe92deba61ae88fac9ffd7813cdc079361725c9d410dad2eafd4a00547cc70c65a9d5693665265d37799504d8a62163139f7a18393ac71264a9545df3b38f9ba4bd493d45ced8fd2ba1508747bc4e3809ac2dbb22fa", @generic="4ed6ff4fd275c563138f09ad4427f828f25f60600d8269a9fae31dd63fe53d634d60fa2d78a43244dd692392b69f54784a717cef50122e4d485227f94f4f5930ee0a5ba9fdc1fbc2cacdd0502549ca7e0b39534dbd7b3e8d23659f020ecf4975136dc6d290499606ee370aec32a9d245ca99e0f583e1e1b06e2c47157fc770d851027d4adaaf995d28f9a6dc91a0d52ceea11f68d4041c5fa0afab1722084c420cb62c9a62fc4e8f0c454bafc44c86d4ee9204d067", @generic, @generic="14c9a8149a50cf8973f7a2aa68208f6c433c1a0ba2185f4c17b7842a655e40ed0e19953e4ba55ea885a6", @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x10, 0x0, 0x0, @pid}]}, @nested={0x184, 0x36, 0x0, 0x1, [@generic="7af9ead30eddfdf8a6150940f8ef768b2498a008a917af3db70d5b618901ce8bd8d34dd83c62c917842099c967648b89a7f273ae82b517208e202247693b8e7a69ade24d5e052be4490d493ba76e9e4531b255b479c69dad4a5677c9d69da538a3ae676fc279a16acdf56a6913a74adcb56e5e", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r5}, @generic="2bcd6e49f325a6610e6503ba12af6762e4842c34c37eca28f55d243e0bc2738f78c032cb0f916c8122e50bf617123c4ea2dca646c9734fd84e53dd2cf90452d9be62fcfda99d45b2e5b338d546a3c14a0c46bb536d3f39ad1524ed22cfc2f47a4a96e79c1b450c93dd80219b16c4b120b8763a1e35258586e45534f194fe4ca159d4a7cafe21717755b2938baa8314241a4db6e74e9c9445a49bcbfc990ce8b668df5bbc9df65a6d5f6a0e123a8fa0c0f45d3e0baeb044056a1bcea46d053418a02ed5d61a8cb5b9449e1ebd185a718df4fcf2320acef8b61f4aecd97508414816cde5bf62eed3d3566c86bc679a35380300878e46", @typed={0x8, 0xd, 0x0, 0x0, @uid}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="b89573a8a3178bc79d8a86689a6d966ea7e31b8cb475ca714b1118e7d4f0c0d4d499a23f2983eb221aab72debe4ef2c6775d607148436cc4d9ea1de2c8d8ed1b287a60500b9b9c9f62b94e790dbdb82bef7ee1f1b4c7a1f36f002bbf4a2ad32f7606ea59547f2c9b3c8ba1e67e106f7e8c535aa0773700eaf8d58c05fc807a8840ae1b1d6f29bd784fbfc7be319b9e9eec7fd80bf7f5e68785c10252964239926c47b09d8be0cb7fbeecf10a284768ec697c75b15f3c10c2cc7a820fa4abbc7dab74a0e62365f26197471c79abb5923d46fefc629fea81559912e43b2cabb46c04953f3e", @nested={0x1152, 0x23, 0x0, 0x1, [@generic="45f74bc6eb3fb36e0ecfc99958caf7914621494bfb0861382621fc85245ba22417ee70c0aa055060489985dfb82affa1f4878c2878e424278a3c", @generic="2353cafc0bacec3f46103c62dd1834e170846e2baab11aba667410db0ecc10c343d73df1d53b29c7b3f020c9d3263819a1031add6afa4154812c87d4be7f9197416c10df258e1827a8f75cd2e206fef0bfcd644caa8658ad79369afde8a173d2b7e134b25d8751dc677c6f79cbbdff006b47c08cc0bc41cd86418cce24a1060fe674c25b2e820c61be4456069ef41176910d9c9cddfe7ac152b811b78dcb9cf387fa5d4f0855f7b40a3db3a849e5e3b1bf50515d39e00ae51807cadc1136083ea88b16c37f3f25e0fe3cfd611bba6194", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x7fffffff}, @generic="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", @typed={0xc, 0xa, 0x0, 0x0, @u64=0xae1}, @typed={0x16, 0x1d, 0x0, 0x0, @str='/dev/input/event#\x00'}, @typed={0x16, 0x74, 0x0, 0x0, @str='/dev/input/event#\x00'}]}, @nested={0xc1, 0x56, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@empty}, @generic="14d47547e93e12700d47e03a0c4fa16c1c34cd70a5c7b326e76d7609734119546d40419725f53a7c55ce16b82e31fd12e493be43a1e7c4f981599ff86ab3f4ce9f99a84e3da66f2d13339d2eac9a48d57a88dcf5cae1121cca94ee0420ff7c14c65030bb2da1adfe32684560f1846e297dc730e06f98c8460d1bdd93c476d587946d88a4036a221a8e144cf84b6fc1ad591d36676f9ab24256f258bed2432170fb"]}]}, 0x2a90}, {&(0x7f0000003740)={0x394, 0x38, 0x200, 0x70bd27, 0x25dfdbfb, "", [@generic="b8a31e7bc680fa73c936d0b0920f0ed9ea10892317946b38f2802c2e25b777bc20d788a8329a79642b05b3a2f82fca49425af9961c8b94f958aed9e8d930768f6226cfac43d1ec4301002f9f647d1b38b805ce9b6c610fb29651a036e7ff9b6076f450392f280cc621622c6e91069b9535c6811a96f956f47044a82ac1691c2215839a779e5f469118906815589d806043e9f7e81f7dcfe8056c39ff25df611f989c4a6e4fe62e1898d8c8f84ea4afa271196d9189c02c6d743854c47751acff424c4e3154d1a143fa40d95eda2e839f00ffc66a21b85c646bb12e130f5bd752e7eb5dab911a6f020be7bb", @generic="1277584fdc530541fb7f4b64d64344d0d44fb378236a", @nested={0x1e2, 0x2a, 0x0, 0x1, [@generic="6f2ead16cccd1668cac191e92a184410df45fa394364fd1ac4834d3985875b7ab57d4f7fe247ccaae1144a357d522547294fd19364bb2b3df510497542844fc85f701cb54ae51b58779e922172afd7c946593ad95ecad07e52d6f673e3f86b11fa33b2fa8b18317fbb10", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x4}, @generic="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", @typed={0x4, 0x2f}, @typed={0xc, 0x6a, 0x0, 0x0, @u64}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r1}, @generic="1ab8bcb1a5a165d3ff87cdcd2bbbf37efaeede5cd272716743d2a57a4c6baddb0b15e526c4b3671df166cc1671574baa7c5092201d56f6744736cf2335dbdd93d85da0177a497ea41f7a34005f9619c2da"]}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x82, 0x0, 0x0, @uid=r7}, @generic="99bec79dd242c634a60a3286a10a684c131e228d8f27fe3a6db085d2735456c00042048c9b1a05f45ce9fcf6fa753f0bdee8b59fe915d6e9d890799f5432ea6344b5f331c2dd951987093cacaaff139814d11621e5d6ca1312b85fae8d9fbf1b7b3bdf2cd7011939ba9c9b1f7be449c7d71f0f4d38b22946ed5a815324b879", @typed={0x8, 0x39, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@loopback}]}, 0x394}, {&(0x7f0000003b00)={0x2cc, 0x34, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x112, 0x3d, 0x0, 0x1, [@generic="d92e43351bb9319dd8cf77cf7ef21e5134776c248975ca2d51a2a6985a59cb4742d116fbf82e35d1cb81fd3d5b67e180918c4151d928dfc2d58a4326a18b6c34e734c77e746152be5c467e1f4a50634e2454c20e1ed06943fc82413c4565634b6e328db581e4eb4d983ec5468d56a57d20d7c24861659788b252ea8cc12bba3736a24f0fc42598c99c02e99a876a66d6a5a99047c3fd24f846cc355927912b370af92da291a9b22c77a20b3060df099c78cbb17771b5487820e5cbe8df9dbb7ee333efe9fa797a41da7215", @generic="d95807d3dbc6150588065ee76eed36fb3d58038a08cc759dedee8f7b0f1672470be0aba1bfe28b405cfaa71035458c142216e4a4f117b75c387c8d12eb7445", @typed={0x4, 0x6a}, @generic]}, @typed={0x4, 0x94}, @nested={0x1a3, 0xf, 0x0, 0x1, [@generic="d5d879989753d9bd65b94b9c51961bd95745a142a439ee6bae47ea861a064c644e2e7cd89c2f5f351605b63183ad655aa851fce9e57f48d5f6e2486f2a3d4486e852689fdd2fdcf4c0ffcd1e44d62c034ea52d04b8b63c0ed762f8da90d0a8f3cc0e0c713ff1bdaf6a508c4cf78039e6defa047f8ecbfa6fa71e45cc326cfef42c56d97fdc83a99a2d119f5e4f09bd5c627ef2ee68", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast1}, @generic="c3ef297379def1d8780f23edfd90c7df39db90ff218c07af18c07e4f627efa3792bb79f5baf0f45552f0e89b6fcb2155a58c517e5e337ae64b289de723a782c3c6e61a410e177392e78fe271a61f5df15cb17cefe89c8e55fed4c8a8bfc1f575107a71e86e0a24dfe4c35692d5cb566c80b04f0853e9aae13308d32946bfb474983fbafb7a41032cb314f0287aa0eec9d3", @typed={0x8, 0x45, 0x0, 0x0, @u32=0x1}, @generic="b070292154210ef0f2442f5d31c50100db7fd39488ce38bd7f4b424573b21b817b54926bdd0bf7b28b4ad1d3f9569fcc0bffc49a52", @typed={0xc, 0x65, 0x0, 0x0, @u64=0x9}]}]}, 0x2cc}], 0x8, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r12, r14, r1]}}], 0x40, 0x4000000}, 0x4000800) 12:13:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:13:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:13:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003e80)={0x0}, &(0x7f0000003ec0)=0xc) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003f00)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000004000)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004040)={0x0, 0x0, 0x0}, &(0x7f0000004080)=0xc) r12 = accept$inet6(0xffffffffffffffff, &(0x7f00000040c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000004100)=0x1c) (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r14 = openat$cgroup_int(r13, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r14, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000003e00)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="98020000250000012abd7000fcdbdf25690133808200550081ab38a636cdf2394e22fd31c6cfd5883184840b0d697754808dac4b644ef6ee161c20ee5195c879019e0136454a0eb7ca7372f7024c6c9dcdb742433e42e80ce74f47f399ede9c1e7c28b77e5f0ef96f1542a3f7c7df5cb17a019153feebab1ceb18b194e27c4a3b3e9881c92a0f7ea3d313fe21cdf345762d3b56298f2000008004300", @ANYRES32=0xee01, @ANYBLOB="08001000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="d1003a0080"], 0x298}, {&(0x7f00000005c0)={0x36c, 0x36, 0x290, 0x70bd28, 0x1ad, "", [@generic="2ead88413bf13cf9b96faa0ee9edf99b5ee3c9afa88efe1935adb1bdcfe94e72d52f8940f429ea110d3f98949aa07b50bc3009eeb608eddecdfe6c4c92edae996f58d98f7659a83f139f6b74087de3b7a96637e7e338e5ca94b31e17e1576de3be5d34b1381ec26f3f0580f91eecc5a348eea3bf44b38775ad56db29613e51c38684634c567ea0e4d5b4267b2f29307c33d4d26ff9db1ebb09e47a48ed38c0beb2bd3c337eba48e326904fa65ae4cba272e2c31e76c0ec56680f", @nested={0x137, 0x77, 0x0, 0x1, [@typed={0xc8, 0x4c, 0x0, 0x0, @binary="387a30ea8eabac636bb92f52b54d0759f8d9d63b64e91b47b367ceb716fd1cdedf211beed86b47468564236b23382e31a2865dbc1234859d5a024d9ae7572af8a9c626c0f07f24df72c25f75ce456edbcc37f269224624a7dc6095707b3b3649ef498785e749f41b0457717315bf641ba28f2734c497cfc35f746c765ae1a737e1cc81ec8d5740029695612eac7af240fc262848ac62c251ab4bd5b0f2886ea826ac9cd15936c33b910f5d1a51098f1624a8ced14aac0c21d16a3b2c50bc336d9b3faf24"}, @generic="3a729b5e10eabba2b2a605e5405860caf8ec738aeb31f49507db22bcd5e74952cc0065f517d6644f8e37ef4f26d233c7b3b7a356c756481daf3b3e601a10bdb6a5a157237c2be4d8872eba123409a8436e9b0f72eb8c82ceba09ecdeec36eb44eea6c838f5a5b4516c4607"]}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x8000}, @nested={0xf8, 0x10, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="d421d011f64b9e51f046dbf2066ba1cc0640c949349c447b63f8d11963dbdaf0f5cdb3cdba7f5231898e2f781cbebde546c6eb1180835bc90b5dbcefa4b52762e10f740f7a342322c7b7f8e91bd686e267765bd02cb0d86b0d3a9904dbb1bbaf18aa786e6358e9c5bf150cfc11985863a81f49506fe81e2a45c547d29fdb98709a985e6f422165d031e71fe32db3c94a62c156e0683f92a4aee4ba95a80316ad9da501fb9406047a2adb2ba39e9c4f201415418b", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @typed={0x8, 0x3c, 0x0, 0x0, @uid}, @typed={0x8, 0x3c, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x54, 0x66, 0x0, 0x1, [@typed={0x6, 0x7, 0x0, 0x0, @str='{\x00'}, @typed={0x4, 0x2c}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x21}, @generic="f9f817c2352e79fdf5c5828359ce2e2c54fd9f15", @typed={0x8, 0x52, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}, @typed={0x8, 0x79, 0x0, 0x0, @pid}]}, @typed={0x5, 0x32, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}]}, 0x36c}, {&(0x7f0000000040)={0x24, 0x40, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x86, 0x0, 0x0, @u64}, @typed={0x8, 0x8a, 0x0, 0x0, @pid}]}, 0x24}, {&(0x7f0000000200)={0x98, 0x38, 0x8, 0x70bd28, 0x25dfdbfe, "", [@generic="a2028811f656f98ff0809a885c2a8ff4112e593bab753e847aa8feb11391886d35a98e08a19d82f1f20e877b8d6bd2f0edd9c8e2e3b40eaad7ce86418f8132741366d90528ebc6c1011002e6b57ad6838e4f67331713d3ea95e09a0daa8a6a9f2a0d", @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@broadcast}]}, 0x98}, {&(0x7f0000000940)={0x324, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @generic="fd7bbb5c65a84b428c2a68cdbe883e2b9b2e1949f5664c8ebb15e90a26c018ab266623f472a914e9a2f45aff232e7980c627136db71d0b92e09936b8aba82c62987e151a19e48a38da0ef26807e6c06c9a455fd02a7f6d10d7371b8477ff0aa11f896557cdc52a59d5a251471b2d1ac3f9755394e38505881815585a1639ee1467cb315d38fa8e3d77b274cec5749f271d0c360cd5bf2d69e4ab", @nested={0x1c3, 0x73, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@empty}, @generic="66f8f1b2854598e2ad377fbf4d70c73af374670b8392f2d738a1964907228259f4844d99f7b5441eda752d0cdacaae5672bf7498ef2c103847527ebc56a7fc4d982a50b2b72a1359ddfe82dd2ef5b22f19e180e885159e300d36c1a9866c0962494d41051402066d7e015d2b926c9d36fb2c93403d3ef054618c222ffc0063c1277cdcd4f1656679b0e050fa11eff20b318f86b92b7ed1e72eb6191ec72a8219c10adde6c3f17de50f1e61eed31b59f4e12ae572a0aceeb9a8eb57f7deb470816a56b052982b0a44d444ef9454935fac12da074e235479c4ce81797aa7c201c9209548032cb9bc5a65466ac94e17e57ddffe206a88", @generic="a73c94174df4775691def8824489f6cf36055297bb5b560ece2fdad46794f070b134790f4080e5daa1cc7990f74954f4e83b884bc3dea511a85cb765accb9fd9fe7582d8964569d863176769d4cdf4744c57adab4329f79e96b5f11014a10a3f83dd6111648e46c92710108c2bfb3a9755a9ed75f8fcb99ae84629e0e91b2dc92b9a2b1a41b111f6c23b3c9d33c47ba0415a39676857afb9845c00183c1d65520a23"]}, @nested={0x4, 0xc}, @typed={0x8, 0x50, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x9f, 0x34, 0x0, 0x1, [@generic="878a4fe214a80e86715f7a9895d70dce5e2a0ba47a8def97c1b72cddc22df3ecd85c2f87b637895f3b135c4729f0c0c8703c91f475e9be6ad4f0366ee236cce694e1c69ef4ef58c13210edeca926c17e88cda20c28911c8c86d0c3223f2c67d563a40ca2e47ff9edae689df211ada138bd612dffd6555f0f3c2f8f4af6666e69dcd5cadebb0230eee2b72db9c844be", @typed={0x9, 0x65, 0x0, 0x0, @str='/!+.\x00'}]}]}, 0x324}, {&(0x7f0000000c80)={0x2a90, 0x11, 0x10, 0x70bd25, 0x25dfdbff, "", [@nested={0x1375, 0x74, 0x0, 0x1, [@generic="0e64a547e4d50eb843507642518d0050eb88dc064f46777a44a29e183212a5fb0e66560ffe7410134538bf2b942c44d88fa4b53debab16dbcd78deb06f36d80b86d421a11472acff33c4a3bb84cb880187b3c35e6c48e61e6aa9435d3dd056508abe2d1d5106d684b9ee21a113d7d891852de51899c8a96d92839b6e894ce63775a29257435a7859a993117650172671", @generic="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", @generic="cb8e097bd5135df8cbc7fff1522e26028c137b50eca676847e53e2a36a1cc45380245723cfdb788d8f3acff3e07d22f680f73cb87c807d0edd42eba5cc1ee93d350eaadeece890f81c439074a3", @generic="89f234466d74b5cea87d28603540ac2ab211d5bfb220b218f1a41641c261ec7c05171e6e3f0f402bfb8a31403394381d673111cf03a096275904f20a09151372e44fb859941898172ceda4da779ae4f20c36de5c039caede3fae26702570fe8fd49e1a9aec88883528cfea3037c95e15044b3b0b0a3b3e8fb2627e023b13c3506e7ed71040dd5761138f9a84e46e5e52d9d817177835f7618092de757d7c1788f4f5b72988f72c29c524cb8a2bb244ed14807ddd18bb4e06c8894bc0715964bbf3e1565936716463f45b3cc3", @generic="2147d3e4983221c228f80446ec14b6716f15cf265a331064511d63737cac4029aca42a5d74d6d541789ba7816abd43f6ac62c189dc2dcccbda65626b56d812c5c9735d2d2058759496f4518f420808d5ed8e21702df9488c8c598240812f738d0ef6379b9c609040af5cde35277fc840ceec7b11bea081538cbca696b19eddee2f8b8d0602a0a5f5369917c68e80d98b7039b2985c8c1bb44de286d17fefabe463759ae2b9187ef19790c50910c55c85ba4c29ce6c5ef32ff693a7a8d8e8ff35755cd4b8f17f9a1398738b1762fb56197b4fc6e512fe7919", @generic="a0a119ea693c126218e0d4f7d459385cf441451a87aea8c9e0b3abe89417e908f4bb6a1293988bf7227ba035041447ac337e0e9339a7b74afba28bbf3f8d4247b0e1a09fa48db74269626444f8d082dc59c3867eee5f48ad16d562e43f5ccabf795d020d91c23a6b3d5fef8bc496a16554bd84ff1452dcefad1ac7cef912ead7f5f95ecc5b5612e544400872d5", @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x7}, @generic="baaa7721c0d3737655739eb3c278fcce2d043d810f714b7c3f34a6f2f8c893e0dc27e97a940922c958a9ed21c2053da4fe7aeceb5ef9d10df41b88fb85b2b2edfb7119c5152d4d"]}, @typed={0x8, 0x47, 0x0, 0x0, @pid}, @nested={0x6c, 0xd, 0x0, 0x1, [@generic="5c2cfc28238d2b0ba42f8cfae3d5eaeeea78477a670a30cf2e62021662086358f89617a4e23017ed6de51380ce6173d88320bf1f21bd2d5eb72799826e6bf159916ebdf44d668575ca6b03dfc68a2e91b1eb08e61680eab667c884a490c573d054efb9f2de28e65c"]}, @typed={0x8, 0x87, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x20b, 0x47, 0x0, 0x1, [@generic="fe0e3862a6c7ed5e573ac572b241453d156738657387ca720bdfd33aa3f34b0d841dd54fe12ce90b", @generic="43048104a41b925ff23c6b9308cb8d293379f8076eea1e21163069b3090706cb57e98505e5cc6668fd1c99536081d82e9137508fdb2bfca7cb17cdf2004e4c574da6e569885081d74a8aaf0363fa3ae03e64ed71f67aefd8bee715825af3bdc132335387915e7cb6c85034de1ee10bee233ff22f05a3bfd6cf5488fd6c910aa2bc452b6e07e834d965e05fedf141df4dc0c2d618c7f43afb9a4e3fe92deba61ae88fac9ffd7813cdc079361725c9d410dad2eafd4a00547cc70c65a9d5693665265d37799504d8a62163139f7a18393ac71264a9545df3b38f9ba4bd493d45ced8fd2ba1508747bc4e3809ac2dbb22fa", @generic="4ed6ff4fd275c563138f09ad4427f828f25f60600d8269a9fae31dd63fe53d634d60fa2d78a43244dd692392b69f54784a717cef50122e4d485227f94f4f5930ee0a5ba9fdc1fbc2cacdd0502549ca7e0b39534dbd7b3e8d23659f020ecf4975136dc6d290499606ee370aec32a9d245ca99e0f583e1e1b06e2c47157fc770d851027d4adaaf995d28f9a6dc91a0d52ceea11f68d4041c5fa0afab1722084c420cb62c9a62fc4e8f0c454bafc44c86d4ee9204d067", @generic, @generic="14c9a8149a50cf8973f7a2aa68208f6c433c1a0ba2185f4c17b7842a655e40ed0e19953e4ba55ea885a6", @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x10, 0x0, 0x0, @pid}]}, @nested={0x184, 0x36, 0x0, 0x1, [@generic="7af9ead30eddfdf8a6150940f8ef768b2498a008a917af3db70d5b618901ce8bd8d34dd83c62c917842099c967648b89a7f273ae82b517208e202247693b8e7a69ade24d5e052be4490d493ba76e9e4531b255b479c69dad4a5677c9d69da538a3ae676fc279a16acdf56a6913a74adcb56e5e", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r5}, @generic="2bcd6e49f325a6610e6503ba12af6762e4842c34c37eca28f55d243e0bc2738f78c032cb0f916c8122e50bf617123c4ea2dca646c9734fd84e53dd2cf90452d9be62fcfda99d45b2e5b338d546a3c14a0c46bb536d3f39ad1524ed22cfc2f47a4a96e79c1b450c93dd80219b16c4b120b8763a1e35258586e45534f194fe4ca159d4a7cafe21717755b2938baa8314241a4db6e74e9c9445a49bcbfc990ce8b668df5bbc9df65a6d5f6a0e123a8fa0c0f45d3e0baeb044056a1bcea46d053418a02ed5d61a8cb5b9449e1ebd185a718df4fcf2320acef8b61f4aecd97508414816cde5bf62eed3d3566c86bc679a35380300878e46", @typed={0x8, 0xd, 0x0, 0x0, @uid}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="b89573a8a3178bc79d8a86689a6d966ea7e31b8cb475ca714b1118e7d4f0c0d4d499a23f2983eb221aab72debe4ef2c6775d607148436cc4d9ea1de2c8d8ed1b287a60500b9b9c9f62b94e790dbdb82bef7ee1f1b4c7a1f36f002bbf4a2ad32f7606ea59547f2c9b3c8ba1e67e106f7e8c535aa0773700eaf8d58c05fc807a8840ae1b1d6f29bd784fbfc7be319b9e9eec7fd80bf7f5e68785c10252964239926c47b09d8be0cb7fbeecf10a284768ec697c75b15f3c10c2cc7a820fa4abbc7dab74a0e62365f26197471c79abb5923d46fefc629fea81559912e43b2cabb46c04953f3e", @nested={0x1152, 0x23, 0x0, 0x1, [@generic="45f74bc6eb3fb36e0ecfc99958caf7914621494bfb0861382621fc85245ba22417ee70c0aa055060489985dfb82affa1f4878c2878e424278a3c", @generic="2353cafc0bacec3f46103c62dd1834e170846e2baab11aba667410db0ecc10c343d73df1d53b29c7b3f020c9d3263819a1031add6afa4154812c87d4be7f9197416c10df258e1827a8f75cd2e206fef0bfcd644caa8658ad79369afde8a173d2b7e134b25d8751dc677c6f79cbbdff006b47c08cc0bc41cd86418cce24a1060fe674c25b2e820c61be4456069ef41176910d9c9cddfe7ac152b811b78dcb9cf387fa5d4f0855f7b40a3db3a849e5e3b1bf50515d39e00ae51807cadc1136083ea88b16c37f3f25e0fe3cfd611bba6194", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x7fffffff}, @generic="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", @typed={0xc, 0xa, 0x0, 0x0, @u64=0xae1}, @typed={0x16, 0x1d, 0x0, 0x0, @str='/dev/input/event#\x00'}, @typed={0x16, 0x74, 0x0, 0x0, @str='/dev/input/event#\x00'}]}, @nested={0xc1, 0x56, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@empty}, @generic="14d47547e93e12700d47e03a0c4fa16c1c34cd70a5c7b326e76d7609734119546d40419725f53a7c55ce16b82e31fd12e493be43a1e7c4f981599ff86ab3f4ce9f99a84e3da66f2d13339d2eac9a48d57a88dcf5cae1121cca94ee0420ff7c14c65030bb2da1adfe32684560f1846e297dc730e06f98c8460d1bdd93c476d587946d88a4036a221a8e144cf84b6fc1ad591d36676f9ab24256f258bed2432170fb"]}]}, 0x2a90}, {&(0x7f0000003740)={0x394, 0x38, 0x200, 0x70bd27, 0x25dfdbfb, "", [@generic="b8a31e7bc680fa73c936d0b0920f0ed9ea10892317946b38f2802c2e25b777bc20d788a8329a79642b05b3a2f82fca49425af9961c8b94f958aed9e8d930768f6226cfac43d1ec4301002f9f647d1b38b805ce9b6c610fb29651a036e7ff9b6076f450392f280cc621622c6e91069b9535c6811a96f956f47044a82ac1691c2215839a779e5f469118906815589d806043e9f7e81f7dcfe8056c39ff25df611f989c4a6e4fe62e1898d8c8f84ea4afa271196d9189c02c6d743854c47751acff424c4e3154d1a143fa40d95eda2e839f00ffc66a21b85c646bb12e130f5bd752e7eb5dab911a6f020be7bb", @generic="1277584fdc530541fb7f4b64d64344d0d44fb378236a", @nested={0x1e2, 0x2a, 0x0, 0x1, [@generic="6f2ead16cccd1668cac191e92a184410df45fa394364fd1ac4834d3985875b7ab57d4f7fe247ccaae1144a357d522547294fd19364bb2b3df510497542844fc85f701cb54ae51b58779e922172afd7c946593ad95ecad07e52d6f673e3f86b11fa33b2fa8b18317fbb10", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x4}, @generic="a7bd3c40fb07173e32e820a69f728d1740b76d71f6a82d270a582cc4af2211bbda6b41132f903d64fe953654a5210b1ae24cbce4f13a960fa70edf8e4225a26952d65ce56a43e434122ad62a413c64f4ce2d7ac82cee3ea5359735ebf993174c77e98ae4b447b1cd70c85bae5e062be6372df166433286f1895137aa41df3ce8456cc298052f2311ecb1813687c7a252384bdf5ff314321739e65c2bb5c30d00abd871614746b594ec85baef738256915af68319446dd021110c99bc9fe877e04ed0253e3ab440aa326e025951123688d058d53b81038e977ccbdf8e21ad6f42b382bdb1b357e35ef1f2360970d30225999b702732d1bb5a2d2692", @typed={0x4, 0x2f}, @typed={0xc, 0x6a, 0x0, 0x0, @u64}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r1}, @generic="1ab8bcb1a5a165d3ff87cdcd2bbbf37efaeede5cd272716743d2a57a4c6baddb0b15e526c4b3671df166cc1671574baa7c5092201d56f6744736cf2335dbdd93d85da0177a497ea41f7a34005f9619c2da"]}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x82, 0x0, 0x0, @uid=r7}, @generic="99bec79dd242c634a60a3286a10a684c131e228d8f27fe3a6db085d2735456c00042048c9b1a05f45ce9fcf6fa753f0bdee8b59fe915d6e9d890799f5432ea6344b5f331c2dd951987093cacaaff139814d11621e5d6ca1312b85fae8d9fbf1b7b3bdf2cd7011939ba9c9b1f7be449c7d71f0f4d38b22946ed5a815324b879", @typed={0x8, 0x39, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@loopback}]}, 0x394}, {&(0x7f0000003b00)={0x2cc, 0x34, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x112, 0x3d, 0x0, 0x1, [@generic="d92e43351bb9319dd8cf77cf7ef21e5134776c248975ca2d51a2a6985a59cb4742d116fbf82e35d1cb81fd3d5b67e180918c4151d928dfc2d58a4326a18b6c34e734c77e746152be5c467e1f4a50634e2454c20e1ed06943fc82413c4565634b6e328db581e4eb4d983ec5468d56a57d20d7c24861659788b252ea8cc12bba3736a24f0fc42598c99c02e99a876a66d6a5a99047c3fd24f846cc355927912b370af92da291a9b22c77a20b3060df099c78cbb17771b5487820e5cbe8df9dbb7ee333efe9fa797a41da7215", @generic="d95807d3dbc6150588065ee76eed36fb3d58038a08cc759dedee8f7b0f1672470be0aba1bfe28b405cfaa71035458c142216e4a4f117b75c387c8d12eb7445", @typed={0x4, 0x6a}, @generic]}, @typed={0x4, 0x94}, @nested={0x1a3, 0xf, 0x0, 0x1, [@generic="d5d879989753d9bd65b94b9c51961bd95745a142a439ee6bae47ea861a064c644e2e7cd89c2f5f351605b63183ad655aa851fce9e57f48d5f6e2486f2a3d4486e852689fdd2fdcf4c0ffcd1e44d62c034ea52d04b8b63c0ed762f8da90d0a8f3cc0e0c713ff1bdaf6a508c4cf78039e6defa047f8ecbfa6fa71e45cc326cfef42c56d97fdc83a99a2d119f5e4f09bd5c627ef2ee68", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast1}, @generic="c3ef297379def1d8780f23edfd90c7df39db90ff218c07af18c07e4f627efa3792bb79f5baf0f45552f0e89b6fcb2155a58c517e5e337ae64b289de723a782c3c6e61a410e177392e78fe271a61f5df15cb17cefe89c8e55fed4c8a8bfc1f575107a71e86e0a24dfe4c35692d5cb566c80b04f0853e9aae13308d32946bfb474983fbafb7a41032cb314f0287aa0eec9d3", @typed={0x8, 0x45, 0x0, 0x0, @u32=0x1}, @generic="b070292154210ef0f2442f5d31c50100db7fd39488ce38bd7f4b424573b21b817b54926bdd0bf7b28b4ad1d3f9569fcc0bffc49a52", @typed={0xc, 0x65, 0x0, 0x0, @u64=0x9}]}]}, 0x2cc}], 0x8, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r12, r14, r1]}}], 0x40, 0x4000000}, 0x4000800) [ 772.996455][T21285] loop4: detected capacity change from 0 to 87 12:13:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_open_pts(r1, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_open_pts(r1, 0x0) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) read(r2, 0x0, 0x2006) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r3, 0x14) (async) 12:13:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) open_by_handle_at(r1, &(0x7f0000000000)=@reiserfs_3={0xc, 0x3, {0x1, 0xffffff01, 0x8}}, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:13:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = open(&(0x7f0000000040)='./cgroup\x00', 0x100, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x7fff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:13:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003e80)={0x0}, &(0x7f0000003ec0)=0xc) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003f00)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000004000)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004040)={0x0, 0x0, 0x0}, &(0x7f0000004080)=0xc) (async) r12 = accept$inet6(0xffffffffffffffff, &(0x7f00000040c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000004100)=0x1c) (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r14 = openat$cgroup_int(r13, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r14, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000003e00)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="98020000250000012abd7000fcdbdf25690133808200550081ab38a636cdf2394e22fd31c6cfd5883184840b0d697754808dac4b644ef6ee161c20ee5195c879019e0136454a0eb7ca7372f7024c6c9dcdb742433e42e80ce74f47f399ede9c1e7c28b77e5f0ef96f1542a3f7c7df5cb17a019153feebab1ceb18b194e27c4a3b3e9881c92a0f7ea3d313fe21cdf345762d3b56298f2000008004300", @ANYRES32=0xee01, @ANYBLOB="08001000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="d1003a0080"], 0x298}, {&(0x7f00000005c0)={0x36c, 0x36, 0x290, 0x70bd28, 0x1ad, "", [@generic="2ead88413bf13cf9b96faa0ee9edf99b5ee3c9afa88efe1935adb1bdcfe94e72d52f8940f429ea110d3f98949aa07b50bc3009eeb608eddecdfe6c4c92edae996f58d98f7659a83f139f6b74087de3b7a96637e7e338e5ca94b31e17e1576de3be5d34b1381ec26f3f0580f91eecc5a348eea3bf44b38775ad56db29613e51c38684634c567ea0e4d5b4267b2f29307c33d4d26ff9db1ebb09e47a48ed38c0beb2bd3c337eba48e326904fa65ae4cba272e2c31e76c0ec56680f", @nested={0x137, 0x77, 0x0, 0x1, [@typed={0xc8, 0x4c, 0x0, 0x0, @binary="387a30ea8eabac636bb92f52b54d0759f8d9d63b64e91b47b367ceb716fd1cdedf211beed86b47468564236b23382e31a2865dbc1234859d5a024d9ae7572af8a9c626c0f07f24df72c25f75ce456edbcc37f269224624a7dc6095707b3b3649ef498785e749f41b0457717315bf641ba28f2734c497cfc35f746c765ae1a737e1cc81ec8d5740029695612eac7af240fc262848ac62c251ab4bd5b0f2886ea826ac9cd15936c33b910f5d1a51098f1624a8ced14aac0c21d16a3b2c50bc336d9b3faf24"}, @generic="3a729b5e10eabba2b2a605e5405860caf8ec738aeb31f49507db22bcd5e74952cc0065f517d6644f8e37ef4f26d233c7b3b7a356c756481daf3b3e601a10bdb6a5a157237c2be4d8872eba123409a8436e9b0f72eb8c82ceba09ecdeec36eb44eea6c838f5a5b4516c4607"]}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x8000}, @nested={0xf8, 0x10, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="d421d011f64b9e51f046dbf2066ba1cc0640c949349c447b63f8d11963dbdaf0f5cdb3cdba7f5231898e2f781cbebde546c6eb1180835bc90b5dbcefa4b52762e10f740f7a342322c7b7f8e91bd686e267765bd02cb0d86b0d3a9904dbb1bbaf18aa786e6358e9c5bf150cfc11985863a81f49506fe81e2a45c547d29fdb98709a985e6f422165d031e71fe32db3c94a62c156e0683f92a4aee4ba95a80316ad9da501fb9406047a2adb2ba39e9c4f201415418b", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @typed={0x8, 0x3c, 0x0, 0x0, @uid}, @typed={0x8, 0x3c, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x54, 0x66, 0x0, 0x1, [@typed={0x6, 0x7, 0x0, 0x0, @str='{\x00'}, @typed={0x4, 0x2c}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x21}, @generic="f9f817c2352e79fdf5c5828359ce2e2c54fd9f15", @typed={0x8, 0x52, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}, @typed={0x8, 0x79, 0x0, 0x0, @pid}]}, @typed={0x5, 0x32, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}]}, 0x36c}, {&(0x7f0000000040)={0x24, 0x40, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x86, 0x0, 0x0, @u64}, @typed={0x8, 0x8a, 0x0, 0x0, @pid}]}, 0x24}, {&(0x7f0000000200)={0x98, 0x38, 0x8, 0x70bd28, 0x25dfdbfe, "", [@generic="a2028811f656f98ff0809a885c2a8ff4112e593bab753e847aa8feb11391886d35a98e08a19d82f1f20e877b8d6bd2f0edd9c8e2e3b40eaad7ce86418f8132741366d90528ebc6c1011002e6b57ad6838e4f67331713d3ea95e09a0daa8a6a9f2a0d", @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@broadcast}]}, 0x98}, {&(0x7f0000000940)={0x324, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @generic="fd7bbb5c65a84b428c2a68cdbe883e2b9b2e1949f5664c8ebb15e90a26c018ab266623f472a914e9a2f45aff232e7980c627136db71d0b92e09936b8aba82c62987e151a19e48a38da0ef26807e6c06c9a455fd02a7f6d10d7371b8477ff0aa11f896557cdc52a59d5a251471b2d1ac3f9755394e38505881815585a1639ee1467cb315d38fa8e3d77b274cec5749f271d0c360cd5bf2d69e4ab", @nested={0x1c3, 0x73, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@empty}, @generic="66f8f1b2854598e2ad377fbf4d70c73af374670b8392f2d738a1964907228259f4844d99f7b5441eda752d0cdacaae5672bf7498ef2c103847527ebc56a7fc4d982a50b2b72a1359ddfe82dd2ef5b22f19e180e885159e300d36c1a9866c0962494d41051402066d7e015d2b926c9d36fb2c93403d3ef054618c222ffc0063c1277cdcd4f1656679b0e050fa11eff20b318f86b92b7ed1e72eb6191ec72a8219c10adde6c3f17de50f1e61eed31b59f4e12ae572a0aceeb9a8eb57f7deb470816a56b052982b0a44d444ef9454935fac12da074e235479c4ce81797aa7c201c9209548032cb9bc5a65466ac94e17e57ddffe206a88", @generic="a73c94174df4775691def8824489f6cf36055297bb5b560ece2fdad46794f070b134790f4080e5daa1cc7990f74954f4e83b884bc3dea511a85cb765accb9fd9fe7582d8964569d863176769d4cdf4744c57adab4329f79e96b5f11014a10a3f83dd6111648e46c92710108c2bfb3a9755a9ed75f8fcb99ae84629e0e91b2dc92b9a2b1a41b111f6c23b3c9d33c47ba0415a39676857afb9845c00183c1d65520a23"]}, @nested={0x4, 0xc}, @typed={0x8, 0x50, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x9f, 0x34, 0x0, 0x1, [@generic="878a4fe214a80e86715f7a9895d70dce5e2a0ba47a8def97c1b72cddc22df3ecd85c2f87b637895f3b135c4729f0c0c8703c91f475e9be6ad4f0366ee236cce694e1c69ef4ef58c13210edeca926c17e88cda20c28911c8c86d0c3223f2c67d563a40ca2e47ff9edae689df211ada138bd612dffd6555f0f3c2f8f4af6666e69dcd5cadebb0230eee2b72db9c844be", @typed={0x9, 0x65, 0x0, 0x0, @str='/!+.\x00'}]}]}, 0x324}, {&(0x7f0000000c80)={0x2a90, 0x11, 0x10, 0x70bd25, 0x25dfdbff, "", [@nested={0x1375, 0x74, 0x0, 0x1, [@generic="0e64a547e4d50eb843507642518d0050eb88dc064f46777a44a29e183212a5fb0e66560ffe7410134538bf2b942c44d88fa4b53debab16dbcd78deb06f36d80b86d421a11472acff33c4a3bb84cb880187b3c35e6c48e61e6aa9435d3dd056508abe2d1d5106d684b9ee21a113d7d891852de51899c8a96d92839b6e894ce63775a29257435a7859a993117650172671", @generic="d5fc477a8b29dc69db235efaa1afb031bd8759b0cdf279bb9245411fae2721ac6e4917d1f659d877711a4f1a7de25a0dbf97c1c703f865812d789eee64906871ed8d715dd00b461d34ecf012dd2e67066905b71f13dd7212bbaec137b6d33d8cfd0ad69b8ceb3506387dc1313d4b4ec96b9b1da1a9fabeb9491aa06b5ab906023bfdd6e522594d8ffa20b29e65de315103175fd2a3767f3af3c11f879df8c8013e552755fa2f7301ebc6bf468689a09a787828484a9f48191f0ba99d4063368ea5fe158be91d9817aedfa6c15dad742189ec6177eb8c75a59459b272b344506e6027504909d66780f0ba59f9df10c7ecfcee375731f7e265b01698d25796f03a282f5028d783b5378c033fafe8294cc34002ef3452e758631f12acbe36b50bf75aae4822210a836e307c04abf49e5d8f8fa516fe65d81f776c6073114c8ed046b7e558404fd09b71a9bf952b7435538ab119f546c07518e802b3e6dec045cb591717a7f0dd740a71e9110ed073e562888364793f7861b614c23baeaf13f5780792b0598c105bf03105a0c2d67dbdd86498c4654d3bcfdc0507fdbc612090a76b8f9333f3f1c149f273deb41420184d7620743448eb27697b40446dc62b7691244faf4d54118e9b0a0ce02239aca4087e737a0ccdce3993db683be0f6ade6897b70cf64dbbb8d2a8dd8a6feae801a9a5f6cd538648f419692151cff318884c504d8a8051225a9d692d5e6eea4592cb7924f9adc505c9b2771bb578b41379cecaa2f88e90e9efc2bb5a1f068fd48f4e229496185ccdb0f2c24810754953021837629574e8390e8738e00b947aa87ef21288a125db2eae2e111c2c0e5074b5ab22987f994806f9cdef30c60ae878e717789e171c775e2562f9db72a30bcf89492d1d19a35709951d9272e12562c926d02389f53775c8575dc1eaaa48e2666e62fc6f20921355981ed10f2f70f9a8f8796117047b247d063d404a134166ae85da54b80f610c134212ea2f90175aa11793ffdbf6d50f64fd047e525ac4c7cf3b2a7447b49602f261bc98efb1bd945d5df378d92d0a207513ac81e4ff82e9ca6481bd9b4942a329402438158d56386bb291e3d7c00f04fb16dc3f69d7f842e078fba5c906426c56df5b3d5506218e9eeacbd759790ffd49a14a2bf0f54621c429962435199aa8ea342901cdfda0034a5f80e806560af7f7b734e23a4998b9e40782a4a58da3a3536a01a6e150170ce30981df22b762de667c700fe05b91ee43c9a68d2372993e97f66c5601abbd5255b56232176e7989b48b8c84688a224a3bb63b4ba1df794c62d20e785dd40cf035cba71e1e0e750e1aa716af0c4d8d5d0e05be0ae2818378fbcdbd5bd16af0589504be528b0fa358823ea35f1dda8b189a08a81d1ad19f9615240014d85e782ca3acc174009e0969bff0321d08bb87df9d67c4ac720c6c393c99b2c3cfd030d4eb5f4bf3b4ee9dd155afe7e84c6c59b8efd4c4d6eedca5502de4d78d0d6c0b930d3100d2ed79c31f4ff01d01c113059c5cf78272d45fb6cba62c5a17a650e03e236ddf9cf1889fe3acf3ad5a539df0c89b86bfce6286a72d4295105240a933de4caf70a7ae5342b97d05d11d5c5a142a76a1d424d7b1585cbe3927da2ee6eb767d81fc3b133bdf66ff8ab8a46676f510646decc4d79c56b2984bc47c8ffcf4cac92dc8b3ecc7baa7fa90e32a946c3471b5e0ee3f8da7467bf7e88657750725f634158e5c21ff08d1ae6ec798ce7476cfd1de21cb6c3e66acfd9fd12640334d443f7a3c2202524757fd62e5eacf1140ee9b0699309492a16f01ded1413c89b520d816c8dbb0ed30e94f79d9fce70136df5ac5b4040315eab113688a078863b70ad073d490cdb3ec1a4d226329d7c223cade37a55897737cc5810c98fcc37ea752ea40705bafde803bef52ae4f07294aaa92b51b6ae6443bb933d13bc2e7b9c65c7b2d7a879e619ba2442ed47a3a48fc2457485549adf0bfa988c83336137de8b31532792dade7ae920df85528df7508afa013b62144bde4b99b288c86a2168a3f6fe555f31ad2944e69cd3e0ec628b6e8c24bd27e31907b0e01fc37d48abb69177b37b010f6f075bcf877f876b316f579cfdaa2b1debb3d90d80ac4c9348bc6cc7534104939e5b82b288a1449b0628d78fa6ac5ddf18baeba3a0beb43cecc1176aa4224b73f09a0cc16288ddd8eb9d6c3368611bb5d34663ca6fcc5ab57e769cbd409183f03a67e7cffb6b797e2037c51037890ff725d59f13e4d473b885ffec777afabb5e690ed3cb5b329a1b84b5e44babefcf2581c17bcc592166e1f37fe2609eeb8c059841581591bb9782f4162a6214ff4696433c1b9871babd1d635dbf965581b32b3711fffa995d9f449291a45ba97a55d8d64a354be68100b79bfa33c1d7fa0b7b9e4a191ad3872e02492df25c61fa3b889b20fe6e37a2f8ea7f9f6f39842e380c18449e813d309942eaee5efc94f6c87c24f4d33e62052175d9e9d62fbbc15c5fdae122d1b90bf2b4029ac3b2a6208e7d580985066ecf6a436b52d46a6c32eb2a5ac23995b2d267fbff33dc7579881a25e858598a49c7002d4b4b01ae8b4e233ba661604ab6e85941fcea74baa05c4846d7a436c0cc0ed07db2f47bbcb4faa9351c9b557642438064cd94e99de10d03058880fef0b96f4562b7d7c265b838aaddf98f557369f9f0d7f561758ebbde2bbe6443538f9e31331dbe65c432a05e0c22d404e0edbea4583a40a00aa311ab0a2b63046910c32929d72e07bf4863ae3553c0d9082a76ca72724b46a35f128ea96fbe5add562e8fb6a99faff5a4330a7322a15644405b7f459c7a42e4e3bfd8c9171713dd2b047092d120761fb12327d1a6f70e14b3c3b49218c564e4d76a1dd5a73d257bd45a8275131da690c10806513ca79def22da4ebbcccfd9def828931604320ba258592f1b12b291ab90f17b97892d4328e10ad032329da2e7ff59b66b0fee7f6fe0f6037ca2fe68b1c7fba4f0e7a25956be6210a9d6a58984226911dac1ef083ef534f67f6d26e4ff8dbf2c81f49f95416179964831ff240b2bc7d3ee7e235c5ac53fc4ae6e4e921fb5203fcf66254b124ffb18b053548376fbbbaf5632f77417c5c1315ddd3a2c17849dcc09743936d0c5425d45ae8c13536a3832d4b6143ca6624cddac65f22ea7424a9f9341b117706e11c512aac0c9120aa47aa0b75fbceeb5fa189da9f939d83a6572040128170d7789a4b42462c5d1c82c79ffa7f12d59fa34c46c2e13f925bbd2759973f156404e5c8884bf410f03f2bc448eed5ca50b27c4d2393b6c3e136327609f2e49d18ce089f2710501108d4086baf8bc7e00828ae62c460c1c73d1a3c0b51546f1105129ece9b77f3cc21b58e8892248f02860c58dcd54142879f4f154543c3583289df0c89cf27fa1035a7915d9516a4cf9208b2879c4937c01d29679eb0e94df83a710ae9806ab58c24cbf126886a70a5c0cdf5dcb956248d0402af665e472ce4dea5a0841962a7123c9f892a1d192f53827893488bffc864f790ca3e210ce456aaf105b3cb5a2c667bc6320765df78504a60ea045e2d01085fcb268b09c75bb40a9ac5a5252dd4904ddeae5709e67059127d1a1b27ce32c220d357761ccc081fa58d0c5a636b875b65838497be557cecfad6ede1232236e36b337fd2f672f43a1e666a7096eb37e5022d23cf177b74127fc91501bc4927b20c1b1685861f0ca92b3463f79450b71004b3cc1965d536b6ce5abab62fdd525cc83245e39c6cae5e04a3a14499923ee07721c856a596e402681f71fe3afa4104c934cf4ad637eae74da2a5c5bac613664002c4de5fafd144f649d142a3a05140a8a4764024f2900611a6eef07a13aeccdf3aa3cd026d37a0d421f5188afbd0f71b18825139570273699a01f7db9bf20917a40e09160332a9f30eed40aab0334e61ddca2f0dc83439854a226509937548680b861bee294e9d3056bdeb7308c0961897ab6eee4d89ed556692ee66109f77f8c45674c17e1fc275ca4ae720c29e61cf9a2d7ddbd976e3e3dbf34f0bdf3ed804157b19ee7c6ec3256e17e44b368ed578a884540f29fce4f9e8535053f26574de9ed2b68ff531d238de80aaba8580497bb1eb25a0a4faaacba413430223ee428bf3f68ec272270f0080e0d4e850662016a997c2599a33fcc060ae991e8b0b49e8d1a07ec69e17f30ffc156a267c8d40807c0e1632beb0d65785186ccaa76c7306272d1874a40516027a83b441ccab4e1bf48fe7805aafc18fd0abb430750c069eac761767de16947c2c21ae31136c0f328f32cef2640b7d1b0de87dab603c680a52f452897e7e04f77b26ebbb3e20895b1761d4631b0e1d32d0ead75e1a2b0d3591b1b8780d910c55e8bf1eee2e758708c2f28771a5d4cac37b8e16314d391a37f1a1935d5439c154cde0416c0ce78ea32a9084d13a20696dfb134d021fc6cca4170f8e3a8f730f5203f38b2e96c486582614ff828804d75f4538f41641d0e5dcf059a98b1d81e571b9954675490759860bc6fcf1c6bc35657af187b01035685d3a68af3dcdbca3c5d5725ad2464d17650f57268dd337433763f3b9baed9c82045c8573fb79758f31124b383a1d0434b54c0ac97512f209b9b3bf2d5670ad126fd44b357e745d07d0f1ded6ae7189d53b6de75c4f52b5644711e1dc644479bc11f76d926ec3a8f1c6fc509c2dfcb0e50c80a3195519848fabd67b910f6a0b0fb3fed474319abbd23f27e965c32f013615b7e2fb0f8a810aa657e09abae0379d2b06cc189ab45fd7c9b0cc28d6748b9ae80220af5b918dbf0b8722e9e4e1554f9a29468eae1fc760c01be68645d2b5df545f75eddbb47cd875f4f269abce0ebd5abeaae67da25a8aa1aa2c59c6a4a3a08ffa7e2572f20165c174f89125b4211b6ef115a5796089d1a37d5f3cbe4ef5ae10d18e77d92ab2a69c2935d65d47cb1ba637c5d72bcfa57021b80eae3f3b370833ef723618e614412354554d5c285f8038bbdacd3bac12028aaa88a77dbca0c3cbf79694cfa2711d787f9afd61b9cb72a6ebdcbdea6755c5606c8c1858f1950a38201d90412fa9f086df691b339a7fb70c299917bd5a3f86fa3f9acd5daaa816f433d654cee16c4bb2daec19eacf25afe29bdf5ad9262efd26d80611ae26ff7a1c6dc5be7c96217ae5b22e779902dc95fddc64ba2dc996753a2262ee28157aa0670c0da999bc2d0a31aaf3349060dfeb711617fdfb7cc0c2c13513e088114507805d462c8c426d1e062fc06da6ffceeba2219ddb89acb36623a1c664ae0d42c4460f85e6ef99c9f7ccb6ba615c750ba9b5106fc9075c3a14ba9fb4546d11de1341cb27486f309704c55abc14f0102104089d88fd439adb95fac89ada966371e58c0fb8dc93e7e1877d7c2248c7b324fdfe34a6d4627c5646e2fada7d43bec120720e126a8121aa8d29541646f5f5739956bd940919c6aedb12c217932837df250306e31e3abf63f94ab96ce13e0acd07eb3f6954d91bf94d3d91b19a9b6494610dd9e82ebd9e9a661f18b46a6627d3017179f034722597f867364e5c6449f7d91690e5b9d3a259424bb5b3625823152e9f3b703f44559e5c322b10b663a1a6e5a3640127888c77772aa1cfcec0cfbe701e4c65d0d0dc2a36cec25896d2229aa6edd2c0e97d076bbeed569bab45f35cecfd8c9e33f6b6fa9a13a34d003412546ff93b0e3b7d7424b009bcf950227bdf28d1eca194eab9bb48bee1b472c9a3c0a10e86c30bef54f09d1ae359c08eb77ee0e6a1b5223d2dc", @generic="cb8e097bd5135df8cbc7fff1522e26028c137b50eca676847e53e2a36a1cc45380245723cfdb788d8f3acff3e07d22f680f73cb87c807d0edd42eba5cc1ee93d350eaadeece890f81c439074a3", @generic="89f234466d74b5cea87d28603540ac2ab211d5bfb220b218f1a41641c261ec7c05171e6e3f0f402bfb8a31403394381d673111cf03a096275904f20a09151372e44fb859941898172ceda4da779ae4f20c36de5c039caede3fae26702570fe8fd49e1a9aec88883528cfea3037c95e15044b3b0b0a3b3e8fb2627e023b13c3506e7ed71040dd5761138f9a84e46e5e52d9d817177835f7618092de757d7c1788f4f5b72988f72c29c524cb8a2bb244ed14807ddd18bb4e06c8894bc0715964bbf3e1565936716463f45b3cc3", @generic="2147d3e4983221c228f80446ec14b6716f15cf265a331064511d63737cac4029aca42a5d74d6d541789ba7816abd43f6ac62c189dc2dcccbda65626b56d812c5c9735d2d2058759496f4518f420808d5ed8e21702df9488c8c598240812f738d0ef6379b9c609040af5cde35277fc840ceec7b11bea081538cbca696b19eddee2f8b8d0602a0a5f5369917c68e80d98b7039b2985c8c1bb44de286d17fefabe463759ae2b9187ef19790c50910c55c85ba4c29ce6c5ef32ff693a7a8d8e8ff35755cd4b8f17f9a1398738b1762fb56197b4fc6e512fe7919", @generic="a0a119ea693c126218e0d4f7d459385cf441451a87aea8c9e0b3abe89417e908f4bb6a1293988bf7227ba035041447ac337e0e9339a7b74afba28bbf3f8d4247b0e1a09fa48db74269626444f8d082dc59c3867eee5f48ad16d562e43f5ccabf795d020d91c23a6b3d5fef8bc496a16554bd84ff1452dcefad1ac7cef912ead7f5f95ecc5b5612e544400872d5", @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x7}, @generic="baaa7721c0d3737655739eb3c278fcce2d043d810f714b7c3f34a6f2f8c893e0dc27e97a940922c958a9ed21c2053da4fe7aeceb5ef9d10df41b88fb85b2b2edfb7119c5152d4d"]}, @typed={0x8, 0x47, 0x0, 0x0, @pid}, @nested={0x6c, 0xd, 0x0, 0x1, [@generic="5c2cfc28238d2b0ba42f8cfae3d5eaeeea78477a670a30cf2e62021662086358f89617a4e23017ed6de51380ce6173d88320bf1f21bd2d5eb72799826e6bf159916ebdf44d668575ca6b03dfc68a2e91b1eb08e61680eab667c884a490c573d054efb9f2de28e65c"]}, @typed={0x8, 0x87, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x20b, 0x47, 0x0, 0x1, [@generic="fe0e3862a6c7ed5e573ac572b241453d156738657387ca720bdfd33aa3f34b0d841dd54fe12ce90b", @generic="43048104a41b925ff23c6b9308cb8d293379f8076eea1e21163069b3090706cb57e98505e5cc6668fd1c99536081d82e9137508fdb2bfca7cb17cdf2004e4c574da6e569885081d74a8aaf0363fa3ae03e64ed71f67aefd8bee715825af3bdc132335387915e7cb6c85034de1ee10bee233ff22f05a3bfd6cf5488fd6c910aa2bc452b6e07e834d965e05fedf141df4dc0c2d618c7f43afb9a4e3fe92deba61ae88fac9ffd7813cdc079361725c9d410dad2eafd4a00547cc70c65a9d5693665265d37799504d8a62163139f7a18393ac71264a9545df3b38f9ba4bd493d45ced8fd2ba1508747bc4e3809ac2dbb22fa", @generic="4ed6ff4fd275c563138f09ad4427f828f25f60600d8269a9fae31dd63fe53d634d60fa2d78a43244dd692392b69f54784a717cef50122e4d485227f94f4f5930ee0a5ba9fdc1fbc2cacdd0502549ca7e0b39534dbd7b3e8d23659f020ecf4975136dc6d290499606ee370aec32a9d245ca99e0f583e1e1b06e2c47157fc770d851027d4adaaf995d28f9a6dc91a0d52ceea11f68d4041c5fa0afab1722084c420cb62c9a62fc4e8f0c454bafc44c86d4ee9204d067", @generic, @generic="14c9a8149a50cf8973f7a2aa68208f6c433c1a0ba2185f4c17b7842a655e40ed0e19953e4ba55ea885a6", @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x10, 0x0, 0x0, @pid}]}, @nested={0x184, 0x36, 0x0, 0x1, [@generic="7af9ead30eddfdf8a6150940f8ef768b2498a008a917af3db70d5b618901ce8bd8d34dd83c62c917842099c967648b89a7f273ae82b517208e202247693b8e7a69ade24d5e052be4490d493ba76e9e4531b255b479c69dad4a5677c9d69da538a3ae676fc279a16acdf56a6913a74adcb56e5e", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r5}, @generic="2bcd6e49f325a6610e6503ba12af6762e4842c34c37eca28f55d243e0bc2738f78c032cb0f916c8122e50bf617123c4ea2dca646c9734fd84e53dd2cf90452d9be62fcfda99d45b2e5b338d546a3c14a0c46bb536d3f39ad1524ed22cfc2f47a4a96e79c1b450c93dd80219b16c4b120b8763a1e35258586e45534f194fe4ca159d4a7cafe21717755b2938baa8314241a4db6e74e9c9445a49bcbfc990ce8b668df5bbc9df65a6d5f6a0e123a8fa0c0f45d3e0baeb044056a1bcea46d053418a02ed5d61a8cb5b9449e1ebd185a718df4fcf2320acef8b61f4aecd97508414816cde5bf62eed3d3566c86bc679a35380300878e46", @typed={0x8, 0xd, 0x0, 0x0, @uid}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="b89573a8a3178bc79d8a86689a6d966ea7e31b8cb475ca714b1118e7d4f0c0d4d499a23f2983eb221aab72debe4ef2c6775d607148436cc4d9ea1de2c8d8ed1b287a60500b9b9c9f62b94e790dbdb82bef7ee1f1b4c7a1f36f002bbf4a2ad32f7606ea59547f2c9b3c8ba1e67e106f7e8c535aa0773700eaf8d58c05fc807a8840ae1b1d6f29bd784fbfc7be319b9e9eec7fd80bf7f5e68785c10252964239926c47b09d8be0cb7fbeecf10a284768ec697c75b15f3c10c2cc7a820fa4abbc7dab74a0e62365f26197471c79abb5923d46fefc629fea81559912e43b2cabb46c04953f3e", @nested={0x1152, 0x23, 0x0, 0x1, [@generic="45f74bc6eb3fb36e0ecfc99958caf7914621494bfb0861382621fc85245ba22417ee70c0aa055060489985dfb82affa1f4878c2878e424278a3c", @generic="2353cafc0bacec3f46103c62dd1834e170846e2baab11aba667410db0ecc10c343d73df1d53b29c7b3f020c9d3263819a1031add6afa4154812c87d4be7f9197416c10df258e1827a8f75cd2e206fef0bfcd644caa8658ad79369afde8a173d2b7e134b25d8751dc677c6f79cbbdff006b47c08cc0bc41cd86418cce24a1060fe674c25b2e820c61be4456069ef41176910d9c9cddfe7ac152b811b78dcb9cf387fa5d4f0855f7b40a3db3a849e5e3b1bf50515d39e00ae51807cadc1136083ea88b16c37f3f25e0fe3cfd611bba6194", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x7fffffff}, @generic="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", @typed={0xc, 0xa, 0x0, 0x0, @u64=0xae1}, @typed={0x16, 0x1d, 0x0, 0x0, @str='/dev/input/event#\x00'}, @typed={0x16, 0x74, 0x0, 0x0, @str='/dev/input/event#\x00'}]}, @nested={0xc1, 0x56, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@empty}, @generic="14d47547e93e12700d47e03a0c4fa16c1c34cd70a5c7b326e76d7609734119546d40419725f53a7c55ce16b82e31fd12e493be43a1e7c4f981599ff86ab3f4ce9f99a84e3da66f2d13339d2eac9a48d57a88dcf5cae1121cca94ee0420ff7c14c65030bb2da1adfe32684560f1846e297dc730e06f98c8460d1bdd93c476d587946d88a4036a221a8e144cf84b6fc1ad591d36676f9ab24256f258bed2432170fb"]}]}, 0x2a90}, {&(0x7f0000003740)={0x394, 0x38, 0x200, 0x70bd27, 0x25dfdbfb, "", [@generic="b8a31e7bc680fa73c936d0b0920f0ed9ea10892317946b38f2802c2e25b777bc20d788a8329a79642b05b3a2f82fca49425af9961c8b94f958aed9e8d930768f6226cfac43d1ec4301002f9f647d1b38b805ce9b6c610fb29651a036e7ff9b6076f450392f280cc621622c6e91069b9535c6811a96f956f47044a82ac1691c2215839a779e5f469118906815589d806043e9f7e81f7dcfe8056c39ff25df611f989c4a6e4fe62e1898d8c8f84ea4afa271196d9189c02c6d743854c47751acff424c4e3154d1a143fa40d95eda2e839f00ffc66a21b85c646bb12e130f5bd752e7eb5dab911a6f020be7bb", @generic="1277584fdc530541fb7f4b64d64344d0d44fb378236a", @nested={0x1e2, 0x2a, 0x0, 0x1, [@generic="6f2ead16cccd1668cac191e92a184410df45fa394364fd1ac4834d3985875b7ab57d4f7fe247ccaae1144a357d522547294fd19364bb2b3df510497542844fc85f701cb54ae51b58779e922172afd7c946593ad95ecad07e52d6f673e3f86b11fa33b2fa8b18317fbb10", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x4}, @generic="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", @typed={0x4, 0x2f}, @typed={0xc, 0x6a, 0x0, 0x0, @u64}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r1}, @generic="1ab8bcb1a5a165d3ff87cdcd2bbbf37efaeede5cd272716743d2a57a4c6baddb0b15e526c4b3671df166cc1671574baa7c5092201d56f6744736cf2335dbdd93d85da0177a497ea41f7a34005f9619c2da"]}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x82, 0x0, 0x0, @uid=r7}, @generic="99bec79dd242c634a60a3286a10a684c131e228d8f27fe3a6db085d2735456c00042048c9b1a05f45ce9fcf6fa753f0bdee8b59fe915d6e9d890799f5432ea6344b5f331c2dd951987093cacaaff139814d11621e5d6ca1312b85fae8d9fbf1b7b3bdf2cd7011939ba9c9b1f7be449c7d71f0f4d38b22946ed5a815324b879", @typed={0x8, 0x39, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@loopback}]}, 0x394}, {&(0x7f0000003b00)={0x2cc, 0x34, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x112, 0x3d, 0x0, 0x1, [@generic="d92e43351bb9319dd8cf77cf7ef21e5134776c248975ca2d51a2a6985a59cb4742d116fbf82e35d1cb81fd3d5b67e180918c4151d928dfc2d58a4326a18b6c34e734c77e746152be5c467e1f4a50634e2454c20e1ed06943fc82413c4565634b6e328db581e4eb4d983ec5468d56a57d20d7c24861659788b252ea8cc12bba3736a24f0fc42598c99c02e99a876a66d6a5a99047c3fd24f846cc355927912b370af92da291a9b22c77a20b3060df099c78cbb17771b5487820e5cbe8df9dbb7ee333efe9fa797a41da7215", @generic="d95807d3dbc6150588065ee76eed36fb3d58038a08cc759dedee8f7b0f1672470be0aba1bfe28b405cfaa71035458c142216e4a4f117b75c387c8d12eb7445", @typed={0x4, 0x6a}, @generic]}, @typed={0x4, 0x94}, @nested={0x1a3, 0xf, 0x0, 0x1, [@generic="d5d879989753d9bd65b94b9c51961bd95745a142a439ee6bae47ea861a064c644e2e7cd89c2f5f351605b63183ad655aa851fce9e57f48d5f6e2486f2a3d4486e852689fdd2fdcf4c0ffcd1e44d62c034ea52d04b8b63c0ed762f8da90d0a8f3cc0e0c713ff1bdaf6a508c4cf78039e6defa047f8ecbfa6fa71e45cc326cfef42c56d97fdc83a99a2d119f5e4f09bd5c627ef2ee68", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast1}, @generic="c3ef297379def1d8780f23edfd90c7df39db90ff218c07af18c07e4f627efa3792bb79f5baf0f45552f0e89b6fcb2155a58c517e5e337ae64b289de723a782c3c6e61a410e177392e78fe271a61f5df15cb17cefe89c8e55fed4c8a8bfc1f575107a71e86e0a24dfe4c35692d5cb566c80b04f0853e9aae13308d32946bfb474983fbafb7a41032cb314f0287aa0eec9d3", @typed={0x8, 0x45, 0x0, 0x0, @u32=0x1}, @generic="b070292154210ef0f2442f5d31c50100db7fd39488ce38bd7f4b424573b21b817b54926bdd0bf7b28b4ad1d3f9569fcc0bffc49a52", @typed={0xc, 0x65, 0x0, 0x0, @u64=0x9}]}]}, 0x2cc}], 0x8, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r12, r14, r1]}}], 0x40, 0x4000000}, 0x4000800) [ 773.177067][T21301] serio: Serial port pts0 12:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fiLe0\x00']) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:00 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x30, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = open(&(0x7f0000000040)='./cgroup\x00', 0x100, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x7fff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) open(&(0x7f0000000040)='./cgroup\x00', 0x100, 0xa0) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x7fff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fiLe0\x00']) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fiLe0\x00']) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) getpeername$netrom(r3, &(0x7f0000000400)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) r1 = open(&(0x7f0000000040)='./cgroup\x00', 0x100, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x7fff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_open_pts(r1, 0x0) (async) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r3 = gettid() (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) 12:14:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 773.371925][T21325] loop4: detected capacity change from 0 to 87 12:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @sack_perm, @mss, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) [ 773.459259][T21331] serio: Serial port pts0 12:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fiLe0\x00']) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) getpeername$netrom(r3, &(0x7f0000000400)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) (async) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:00 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x34, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @sack_perm, @mss, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @sack_perm, @mss, @window={0x3, 0xfffe}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r4, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) gettid() 12:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) [ 773.640853][T21356] loop4: detected capacity change from 0 to 87 [ 773.679513][T21364] binder: BINDER_SET_CONTEXT_MGR already set 12:14:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) getpeername$netrom(r3, &(0x7f0000000400)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) (async) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @sack_perm, @mss, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @sack_perm, @mss, @window={0x3, 0xfffe}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) [ 773.704793][T21364] binder: 21363:21364 ioctl 4018620d 20000000 returned -16 12:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) [ 773.768689][T21364] serio: Serial port pts0 12:14:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:00 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{r1, r2/1000+60000}, 0x2, 0x81, 0x81}, {{r3, r4/1000+10000}, 0x2, 0x80, 0x80000001}, {{}, 0x3, 0x80, 0x5}, {{}, 0x12, 0x7, 0x7}, {{0x77359400}, 0x16, 0x5, 0x1}, {{r5, r6/1000+10000}, 0x12, 0x1, 0x1a00000}, {{0x0, 0x2710}, 0x16, 0x2, 0x91d}, {{r7, r8/1000+10000}, 0x12, 0x3f, 0x8}, {{0x77359400}, 0x17, 0x6, 0x4}, {{r9, r10/1000+10000}, 0x4, 0x9, 0x10001}], 0xf0) r11 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r11, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) pipe2(&(0x7f0000000000), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = openat(r2, &(0x7f0000000100)='./cgroup\x00', 0x4002, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:14:01 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x38, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) [ 774.800243][T21395] loop4: detected capacity change from 0 to 87 [ 774.821663][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 774.821680][ T26] audit: type=1804 audit(1667996041.673:1260): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1130/file1/bus" dev="loop4" ino=1048932 res=1 errno=0 [ 774.864614][ T26] audit: type=1804 audit(1667996041.703:1261): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1130/file1/bus" dev="loop4" ino=1048932 res=1 errno=0 12:14:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r4, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r6) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() 12:14:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) pipe2(&(0x7f0000000000), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = openat(r2, &(0x7f0000000100)='./cgroup\x00', 0x4002, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:03 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{r1, r2/1000+60000}, 0x2, 0x81, 0x81}, {{r3, r4/1000+10000}, 0x2, 0x80, 0x80000001}, {{}, 0x3, 0x80, 0x5}, {{}, 0x12, 0x7, 0x7}, {{0x77359400}, 0x16, 0x5, 0x1}, {{r5, r6/1000+10000}, 0x12, 0x1, 0x1a00000}, {{0x0, 0x2710}, 0x16, 0x2, 0x91d}, {{r7, r8/1000+10000}, 0x12, 0x3f, 0x8}, {{0x77359400}, 0x17, 0x6, 0x4}, {{r9, r10/1000+10000}, 0x4, 0x9, 0x10001}], 0xf0) (async) r11 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r11, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4621, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = pidfd_getfd(r0, r0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1901], 0x76d) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom(r1, &(0x7f0000000200)=""/173, 0xad, 0x3, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}, 0x80) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 12:14:03 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x3c, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4621, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r1 = pidfd_getfd(r0, r0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1901], 0x76d) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) recvfrom(r1, &(0x7f0000000200)=""/173, 0xad, 0x3, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}, 0x80) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) [ 776.688970][T21404] loop4: detected capacity change from 0 to 87 12:14:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) pipe2(&(0x7f0000000000), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = openat(r2, &(0x7f0000000100)='./cgroup\x00', 0x4002, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) pipe2(&(0x7f0000000000), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat(r2, &(0x7f0000000100)='./cgroup\x00', 0x4002, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:03 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{r1, r2/1000+60000}, 0x2, 0x81, 0x81}, {{r3, r4/1000+10000}, 0x2, 0x80, 0x80000001}, {{}, 0x3, 0x80, 0x5}, {{}, 0x12, 0x7, 0x7}, {{0x77359400}, 0x16, 0x5, 0x1}, {{r5, r6/1000+10000}, 0x12, 0x1, 0x1a00000}, {{0x0, 0x2710}, 0x16, 0x2, 0x91d}, {{r7, r8/1000+10000}, 0x12, 0x3f, 0x8}, {{0x77359400}, 0x17, 0x6, 0x4}, {{r9, r10/1000+10000}, 0x4, 0x9, 0x10001}], 0xf0) r11 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r11, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) write$evdev(r0, &(0x7f0000000300)=[{{r1, r2/1000+60000}, 0x2, 0x81, 0x81}, {{r3, r4/1000+10000}, 0x2, 0x80, 0x80000001}, {{}, 0x3, 0x80, 0x5}, {{}, 0x12, 0x7, 0x7}, {{0x77359400}, 0x16, 0x5, 0x1}, {{r5, r6/1000+10000}, 0x12, 0x1, 0x1a00000}, {{0x0, 0x2710}, 0x16, 0x2, 0x91d}, {{r7, r8/1000+10000}, 0x12, 0x3f, 0x8}, {{0x77359400}, 0x17, 0x6, 0x4}, {{r9, r10/1000+10000}, 0x4, 0x9, 0x10001}], 0xf0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r11, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) r5 = dup2(r4, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() [ 776.792131][ T26] audit: type=1804 audit(1667996043.643:1262): pid=21420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1131/file1/bus" dev="sda1" ino=1158 res=1 errno=0 12:14:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41403}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x739f0308461e09fe) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:03 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) syz_io_uring_setup(0x432d, &(0x7f0000000000)={0x0, 0x3bf8, 0x80, 0x1, 0x38a}, &(0x7f00000f6000/0x14000)=nil, &(0x7f00000fe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 776.907685][ T26] audit: type=1804 audit(1667996043.643:1263): pid=21420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1131/file1/bus" dev="sda1" ino=1158 res=1 errno=0 12:14:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41403}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x739f0308461e09fe) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41403}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x739f0308461e09fe) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4621, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = pidfd_getfd(r0, r0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1901], 0x76d) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom(r1, &(0x7f0000000200)=""/173, 0xad, 0x3, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}, 0x80) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4621, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) pidfd_getfd(r0, r0, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1901], 0x76d) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) recvfrom(r1, &(0x7f0000000200)=""/173, 0xad, 0x3, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null]}, 0x80) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) (async) 12:14:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) syz_io_uring_setup(0x432d, &(0x7f0000000000)={0x0, 0x3bf8, 0x80, 0x1, 0x38a}, &(0x7f00000f6000/0x14000)=nil, &(0x7f00000fe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x1, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) tkill(r3, 0x14) 12:14:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41403}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x739f0308461e09fe) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)={0x2, 0x0, [{0xef07, 0x1, 0x0, 0x0, @adapter={0x80, 0x82f2, 0x8, 0x10d8}}, {0x2, 0x3, 0x0, 0x0, @adapter={0x668, 0x1, 0x8, 0x3f, 0x8000}}]}) 12:14:04 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x44, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async, rerun: 32) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async, rerun: 32) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)={0x2, 0x0, [{0xef07, 0x1, 0x0, 0x0, @adapter={0x80, 0x82f2, 0x8, 0x10d8}}, {0x2, 0x3, 0x0, 0x0, @adapter={0x668, 0x1, 0x8, 0x3f, 0x8000}}]}) (rerun: 32) 12:14:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window={0x3, 0x6}, @mss, @window={0x3, 0x2}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xd98f, 0x10000, 0xfff, 0x6, 0x8}, 0x14) [ 777.680665][T21473] serio: Serial port pts0 12:14:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) syz_io_uring_setup(0x432d, &(0x7f0000000000)={0x0, 0x3bf8, 0x80, 0x1, 0x38a}, &(0x7f00000f6000/0x14000)=nil, &(0x7f00000fe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window={0x3, 0x6}, @mss, @window={0x3, 0x2}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xd98f, 0x10000, 0xfff, 0x6, 0x8}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window={0x3, 0x6}, @mss, @window={0x3, 0x2}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x10) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xd98f, 0x10000, 0xfff, 0x6, 0x8}, 0x14) (async) 12:14:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80441) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f00000f0000/0xb000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x4, 0x1, 0x9, 0x7, 0x80000000, 0x7fff, 0x400], 0x8, 0x80c00, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x4, 0xe3, &(0x7f0000000300)="136eb6eef33429e21f46500f6a1f26708488a89aae33a35e489f420269dab8fac0a6f3cec778db922f938a73ff21e49484c88c219efa1443dc66b52e48c6e9598255ddbf6c60a6011bbc2843da595a43fa24a7ae7caef9cc5f5cd9814f153cd8d093b8387407bf5b7e6f99e20e3239f6c1a3f1c8a11ed65dd410f17d80a0e176be5979a3eb5d2be0326f1a0fd42150d058af4ea18ff2babd6fddda54bfbed57bb81369dbcaa7f0bc67669abf9ff1a26cdbb670f1740c5f007808e34a18f008448d7b314b727280a84e69d5de1aef5df1753680f8553ade69099de5bec7f4d88f06830e"}) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x1, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TCFLSH(r2, 0x540b, 0x2) (async) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) tkill(r3, 0x14) 12:14:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)={0x2, 0x0, [{0xef07, 0x1, 0x0, 0x0, @adapter={0x80, 0x82f2, 0x8, 0x10d8}}, {0x2, 0x3, 0x0, 0x0, @adapter={0x668, 0x1, 0x8, 0x3f, 0x8000}}]}) 12:14:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 778.011744][ T26] audit: type=1400 audit(1667996044.863:1264): avc: denied { append } for pid=21510 comm="syz-executor.0" name="event0" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 778.066189][T21509] serio: Serial port pts0 [ 778.211666][T21525] loop4: detected capacity change from 0 to 87 [ 778.248196][ T26] audit: type=1804 audit(1667996045.093:1265): pid=21525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1132/file1/bus" dev="loop4" ino=1048933 res=1 errno=0 [ 778.285965][ T26] audit: type=1804 audit(1667996045.103:1266): pid=21525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1132/file1/bus" dev="loop4" ino=1048933 res=1 errno=0 12:14:05 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80441) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f00000f0000/0xb000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x4, 0x1, 0x9, 0x7, 0x80000000, 0x7fff, 0x400], 0x8, 0x80c00, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x4, 0xe3, &(0x7f0000000300)="136eb6eef33429e21f46500f6a1f26708488a89aae33a35e489f420269dab8fac0a6f3cec778db922f938a73ff21e49484c88c219efa1443dc66b52e48c6e9598255ddbf6c60a6011bbc2843da595a43fa24a7ae7caef9cc5f5cd9814f153cd8d093b8387407bf5b7e6f99e20e3239f6c1a3f1c8a11ed65dd410f17d80a0e176be5979a3eb5d2be0326f1a0fd42150d058af4ea18ff2babd6fddda54bfbed57bb81369dbcaa7f0bc67669abf9ff1a26cdbb670f1740c5f007808e34a18f008448d7b314b727280a84e69d5de1aef5df1753680f8553ade69099de5bec7f4d88f06830e"}) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80441) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f00000f0000/0xb000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x4, 0x1, 0x9, 0x7, 0x80000000, 0x7fff, 0x400], 0x8, 0x80c00}) (async) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x4, 0xe3, &(0x7f0000000300)="136eb6eef33429e21f46500f6a1f26708488a89aae33a35e489f420269dab8fac0a6f3cec778db922f938a73ff21e49484c88c219efa1443dc66b52e48c6e9598255ddbf6c60a6011bbc2843da595a43fa24a7ae7caef9cc5f5cd9814f153cd8d093b8387407bf5b7e6f99e20e3239f6c1a3f1c8a11ed65dd410f17d80a0e176be5979a3eb5d2be0326f1a0fd42150d058af4ea18ff2babd6fddda54bfbed57bb81369dbcaa7f0bc67669abf9ff1a26cdbb670f1740c5f007808e34a18f008448d7b314b727280a84e69d5de1aef5df1753680f8553ade69099de5bec7f4d88f06830e"}) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window={0x3, 0x6}, @mss, @window={0x3, 0x2}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xd98f, 0x10000, 0xfff, 0x6, 0x8}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window={0x3, 0x6}, @mss, @window={0x3, 0x2}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x10) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xd98f, 0x10000, 0xfff, 0x6, 0x8}, 0x14) (async) 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x1, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) tkill(r3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x1, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TCFLSH(r2, 0x540b, 0x2) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) tkill(r3, 0x14) (async) 12:14:05 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x48, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 778.433498][T21533] serio: Serial port pts0 12:14:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (rerun: 32) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (rerun: 64) 12:14:05 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) syz_io_uring_setup(0x432d, &(0x7f0000000000)={0x0, 0x3bf8, 0x80, 0x1, 0x38a}, &(0x7f00000f6000/0x14000)=nil, &(0x7f00000fe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:05 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80441) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f00000f0000/0xb000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x4, 0x1, 0x9, 0x7, 0x80000000, 0x7fff, 0x400], 0x8, 0x80c00, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x4, 0xe3, &(0x7f0000000300)="136eb6eef33429e21f46500f6a1f26708488a89aae33a35e489f420269dab8fac0a6f3cec778db922f938a73ff21e49484c88c219efa1443dc66b52e48c6e9598255ddbf6c60a6011bbc2843da595a43fa24a7ae7caef9cc5f5cd9814f153cd8d093b8387407bf5b7e6f99e20e3239f6c1a3f1c8a11ed65dd410f17d80a0e176be5979a3eb5d2be0326f1a0fd42150d058af4ea18ff2babd6fddda54bfbed57bb81369dbcaa7f0bc67669abf9ff1a26cdbb670f1740c5f007808e34a18f008448d7b314b727280a84e69d5de1aef5df1753680f8553ade69099de5bec7f4d88f06830e"}) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 778.489818][T21550] loop4: detected capacity change from 0 to 87 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x100000000, 0x410000) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0x7, 0xff, 0x6}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) [ 778.557805][ T26] audit: type=1804 audit(1667996045.403:1267): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1133/file1/bus" dev="loop4" ino=1048934 res=1 errno=0 12:14:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r3 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x56, 0x2004, @fd=r3, 0x8, &(0x7f0000000000)="11b8ac2553d94cbd1d43c003abec9c5a026efa2e8cb6cbb3b9b9052fe0bc7258ad628ec0badbcd86c8eea0805cc4e006be7343a8a75e994f1c5e0749c785070cc00a717216281348ba6416abcc711591d9edd0ebbf21164b7fb1d1b21b31814df7de50802f09693593d687686ff69ba1524efef7357a9746390bcb0d921ac800407780eee946e8eb212a940f581f4247a432928abed63f11e6e5c8a30e34618dad86941266c13fd5d091d8f5e81e", 0xae, 0x4, 0x1}, 0x1) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:05 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4c, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 778.685497][ T26] audit: type=1804 audit(1667996045.443:1268): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1133/file1/bus" dev="loop4" ino=1048934 res=1 errno=0 12:14:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r3 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x56, 0x2004, @fd=r3, 0x8, &(0x7f0000000000)="11b8ac2553d94cbd1d43c003abec9c5a026efa2e8cb6cbb3b9b9052fe0bc7258ad628ec0badbcd86c8eea0805cc4e006be7343a8a75e994f1c5e0749c785070cc00a717216281348ba6416abcc711591d9edd0ebbf21164b7fb1d1b21b31814df7de50802f09693593d687686ff69ba1524efef7357a9746390bcb0d921ac800407780eee946e8eb212a940f581f4247a432928abed63f11e6e5c8a30e34618dad86941266c13fd5d091d8f5e81e", 0xae, 0x4, 0x1}, 0x1) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 778.756075][T21570] serio: Serial port pts0 12:14:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r3 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x56, 0x2004, @fd=r3, 0x8, &(0x7f0000000000)="11b8ac2553d94cbd1d43c003abec9c5a026efa2e8cb6cbb3b9b9052fe0bc7258ad628ec0badbcd86c8eea0805cc4e006be7343a8a75e994f1c5e0749c785070cc00a717216281348ba6416abcc711591d9edd0ebbf21164b7fb1d1b21b31814df7de50802f09693593d687686ff69ba1524efef7357a9746390bcb0d921ac800407780eee946e8eb212a940f581f4247a432928abed63f11e6e5c8a30e34618dad86941266c13fd5d091d8f5e81e", 0xae, 0x4, 0x1}, 0x1) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x5}, 0x4}}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) getpeername$netrom(r3, &(0x7f0000000400)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 778.880105][T21579] loop4: detected capacity change from 0 to 87 12:14:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x100000000, 0x410000) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) r3 = gettid() (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (rerun: 64) openat$cgroup_int(r4, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) (async, rerun: 32) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0x7, 0xff, 0x6}) (async, rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) 12:14:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r3 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x56, 0x2004, @fd=r3, 0x8, &(0x7f0000000000)="11b8ac2553d94cbd1d43c003abec9c5a026efa2e8cb6cbb3b9b9052fe0bc7258ad628ec0badbcd86c8eea0805cc4e006be7343a8a75e994f1c5e0749c785070cc00a717216281348ba6416abcc711591d9edd0ebbf21164b7fb1d1b21b31814df7de50802f09693593d687686ff69ba1524efef7357a9746390bcb0d921ac800407780eee946e8eb212a940f581f4247a432928abed63f11e6e5c8a30e34618dad86941266c13fd5d091d8f5e81e", 0xae, 0x4, 0x1}, 0x1) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) fcntl$dupfd(r0, 0x0, r1) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x56, 0x2004, @fd=r3, 0x8, &(0x7f0000000000)="11b8ac2553d94cbd1d43c003abec9c5a026efa2e8cb6cbb3b9b9052fe0bc7258ad628ec0badbcd86c8eea0805cc4e006be7343a8a75e994f1c5e0749c785070cc00a717216281348ba6416abcc711591d9edd0ebbf21164b7fb1d1b21b31814df7de50802f09693593d687686ff69ba1524efef7357a9746390bcb0d921ac800407780eee946e8eb212a940f581f4247a432928abed63f11e6e5c8a30e34618dad86941266c13fd5d091d8f5e81e", 0xae, 0x4, 0x1}, 0x1) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x5}, 0x4}}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) [ 778.978979][ T26] audit: type=1804 audit(1667996045.833:1269): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1134/file1/bus" dev="sda1" ino=1177 res=1 errno=0 12:14:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) getpeername$netrom(r3, &(0x7f0000000400)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 779.121708][T21607] serio: Serial port pts0 12:14:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x14000) r1 = syz_io_uring_setup(0x4203, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/239) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000480)=0x508) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000400)=""/113) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x41) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1}, 0x7fffffff) 12:14:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x5}, 0x4}}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x100000000, 0x410000) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) (async) r3 = gettid() (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) (async) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0x7, 0xff, 0x6}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r3, 0x14) 12:14:06 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x50, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) getpeername$netrom(r3, &(0x7f0000000400)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x14000) r1 = syz_io_uring_setup(0x4203, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/239) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000480)=0x508) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000400)=""/113) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x41) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1}, 0x7fffffff) 12:14:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_io_uring_setup(0x5138, &(0x7f0000000300)={0x0, 0xb006, 0x20, 0x1, 0x1a6, 0x0, r7}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x85) 12:14:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x800, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) [ 780.097838][T21644] serio: Serial port pts0 12:14:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x14000) r1 = syz_io_uring_setup(0x4203, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/239) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000480)=0x508) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000400)=""/113) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x41) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1}, 0x7fffffff) 12:14:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 780.379414][T21668] loop4: detected capacity change from 0 to 87 [ 780.422969][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 780.422985][ T26] audit: type=1804 audit(1667996047.273:1271): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1135/file1/bus" dev="loop4" ino=1048935 res=1 errno=0 12:14:07 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x54, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x805, 0x0, 0x0) 12:14:07 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./cgroup\x00', 0x115) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) io_uring_enter(r1, 0x69ac, 0x6def, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x85) [ 780.507874][ T26] audit: type=1804 audit(1667996047.313:1272): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1135/file1/bus" dev="loop4" ino=1048935 res=1 errno=0 12:14:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be723fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1b1, 0x805, 0x0, 0x0) 12:14:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, 0x0, 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:07 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./cgroup\x00', 0x115) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) io_uring_enter(r1, 0x69ac, 0x6def, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) creat(&(0x7f0000000040)='./cgroup\x00', 0x115) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) io_uring_enter(r1, 0x69ac, 0x6def, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) [ 780.648869][T21679] serio: Serial port pts0 12:14:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x85) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x85) (async) [ 780.690870][T21681] loop4: detected capacity change from 0 to 87 12:14:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, 0x0, 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 780.773557][ T26] audit: type=1804 audit(1667996047.623:1273): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1136/file1/bus" dev="loop4" ino=1048936 res=1 errno=0 [ 780.850234][T21704] serio: Serial port pts0 [ 780.869373][ T26] audit: type=1804 audit(1667996047.623:1274): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1136/file1/bus" dev="loop4" ino=1048936 res=1 errno=0 12:14:07 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x57, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:07 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./cgroup\x00', 0x115) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) io_uring_enter(r1, 0x69ac, 0x6def, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x805, 0x0, 0x0) 12:14:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, 0x0, 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:07 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x8, 0x11) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) open(&(0x7f0000000240)='./cgroup\x00', 0x2402, 0x1) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ftruncate(r0, 0xf) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1b1, 0x885, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12:14:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4627, 0x7ff, 0xa070, 0x3, 0xd, "9a765be97ff32809c0139e277190cf6d23983b"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:14:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x40600, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 781.062451][T21724] loop4: detected capacity change from 0 to 87 12:14:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:08 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x8, 0x11) (async) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) open(&(0x7f0000000240)='./cgroup\x00', 0x2402, 0x1) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ftruncate(r0, 0xf) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1b1, 0x885, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) [ 781.152738][T21730] serio: Serial port pts0 [ 781.165593][ T26] audit: type=1804 audit(1667996048.013:1275): pid=21733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1137/file1/bus" dev="sda1" ino=1180 res=1 errno=0 [ 781.275911][ T26] audit: type=1804 audit(1667996048.043:1276): pid=21733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1137/file1/bus" dev="sda1" ino=1180 res=1 errno=0 12:14:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x40600, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:08 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x8, 0x11) (async) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) open(&(0x7f0000000240)='./cgroup\x00', 0x2402, 0x1) (async, rerun: 32) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ftruncate(r0, 0xf) (async, rerun: 64) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (rerun: 64) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x1b1, 0x885, 0x0, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) 12:14:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4627, 0x7ff, 0xa070, 0x3, 0xd, "9a765be97ff32809c0139e277190cf6d23983b"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) 12:14:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:08 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x58, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4627, 0x7ff, 0xa070, 0x3, 0xd, "9a765be97ff32809c0139e277190cf6d23983b"}) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async, rerun: 32) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async, rerun: 32) r2 = gettid() (async, rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:14:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x40600, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x102000, 0x32) openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x87, 0x7, 0x1, 0x6], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) r3 = syz_clone3(&(0x7f0000000980)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000780), {0x25}, &(0x7f00000007c0)=""/242, 0xf2, &(0x7f00000008c0)=""/71, &(0x7f0000000940)=[0x0], 0x1, {r1}}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000a40)={0x28000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/50, 0x32, &(0x7f0000000680)=""/250, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r2, r3], 0x6, {r4}}, 0x58) [ 782.168059][T21765] serio: Serial port pts0 12:14:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x102000, 0x32) openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x87, 0x7, 0x1, 0x6], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) r3 = syz_clone3(&(0x7f0000000980)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000780), {0x25}, &(0x7f00000007c0)=""/242, 0xf2, &(0x7f00000008c0)=""/71, &(0x7f0000000940)=[0x0], 0x1, {r1}}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000a40)={0x28000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/50, 0x32, &(0x7f0000000680)=""/250, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r2, r3], 0x6, {r4}}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x102000, 0x32) (async) openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x87, 0x7, 0x1, 0x6], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) (async) getpid() (async) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) (async) syz_clone3(&(0x7f0000000980)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000780), {0x25}, &(0x7f00000007c0)=""/242, 0xf2, &(0x7f00000008c0)=""/71, &(0x7f0000000940)=[0x0], 0x1, {r1}}, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000a40)={0x28000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/50, 0x32, &(0x7f0000000680)=""/250, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r2, r3], 0x6, {r4}}, 0x58) (async) 12:14:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8f7a, 0x77, 0x0, 0x2, 0xf, "2e2e23c7c0fa20d1eb0a28aa828dd0a6dbdac4"}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:14:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 782.364299][T21783] serio: Serial port pts0 [ 782.573759][T21794] loop4: detected capacity change from 0 to 87 [ 782.591152][ T26] audit: type=1804 audit(1667996049.443:1277): pid=21794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1138/file1/bus" dev="loop4" ino=1048937 res=1 errno=0 [ 782.629503][ T26] audit: type=1804 audit(1667996049.473:1278): pid=21794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1138/file1/bus" dev="loop4" ino=1048937 res=1 errno=0 12:14:09 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x500, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x102000, 0x32) openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x87, 0x7, 0x1, 0x6], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) r3 = syz_clone3(&(0x7f0000000980)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000780), {0x25}, &(0x7f00000007c0)=""/242, 0xf2, &(0x7f00000008c0)=""/71, &(0x7f0000000940)=[0x0], 0x1, {r1}}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000a40)={0x28000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/50, 0x32, &(0x7f0000000680)=""/250, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r2, r3], 0x6, {r4}}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x102000, 0x32) (async) openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x0, 0x87, 0x7, 0x1, 0x6], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) (async) getpid() (async) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) (async) syz_clone3(&(0x7f0000000980)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000780), {0x25}, &(0x7f00000007c0)=""/242, 0xf2, &(0x7f00000008c0)=""/71, &(0x7f0000000940)=[0x0], 0x1, {r1}}, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000a40)={0x28000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/50, 0x32, &(0x7f0000000680)=""/250, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r2, r3], 0x6, {r4}}, 0x58) (async) 12:14:09 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xd80) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x3d, &(0x7f0000000200)=[{&(0x7f0000010a00)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x1e}, {&(0x7f0000010000)="1020f5f201000e00090000000300000010000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000022557c7f4c464834a18da3b19154b95500000000", 0x80, 0x400}, {&(0x7f0000010080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00mp\x00\x00\x00\x00\x00\x00wm\x00\x00\x00\x00\x00\x00og\x00\x00\x00\x00\x00\x00jp\x00\x00\x00\x00\x00\x00avi\x00\x00\x00\x00\x00m4v\x00\x00\x00\x00\x00m4p\x00\x00\x00\x00\x00mkv\x00\x00\x00\x00\x00mov\x00\x00\x00\x00\x00webm\x00\x00\x00\x00wav\x00\x00\x00\x00\x00m4a\x00\x00\x00\x00\x003gp\x00\x00\x00\x00\x00opus\x00\x00\x00\x00flac\x00\x00\x00\x00gif\x00\x00\x00\x00\x00png\x00\x00\x00\x00\x00svg\x00\x00\x00\x00\x00webp\x00\x00\x00\x00jar\x00\x00\x00\x00\x00deb\x00\x00\x00\x00\x00iso\x00\x00\x00\x00\x00gz\x00\x00\x00\x00\x00\x00xz\x00\x00\x00\x00\x00\x00zst\x00\x00\x00\x00\x00pdf\x00\x00\x00\x00\x00pyc\x00\x00\x00\x00\x00ttc\x00\x00\x00\x00\x00ttf\x00\x00\x00\x00\x00exe\x00\x00\x00\x00\x00apk\x00\x00\x00\x00\x00cnt\x00\x00\x00\x00\x00exo\x00\x00\x00\x00\x00odex\x00\x00\x00\x00vdex\x00\x00\x00\x00so\x00\x00\x00\x00\x00\x00cold\x00\x00\x00\x00db\x00'/352, 0x160, 0x860}, {&(0x7f00000101e0)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0xa80}, {&(0x7f00000102a0)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0xb80}, {&(0x7f0000000c00)="0000000000000000000000000000005cbed2b6f0e7a58a8ad0ddc32ee9da62a615dbf0437d4dec34afb1b0852b1a76d3cdcaa5753c32edd957aa7568800eed7a797c5087c177754cfaff5ddb3ba6dd084d523b7aa7f159abf6aee38a48b6a15a4d49c5c835739089a09eeb95382ee0d55adf966099243251eeee84cf0a1bd3e5f6482d259789eea5602bf61b38a731250af0921c3c0d585af9fb9e1cead8c42614eb700cda4febba20fe27e55bb9d131c9344fcd2225d1d9e40d58875f4b7bad2826021ffe4e6867b8e1c4", 0xcb, 0xc80}, {&(0x7f0000010380)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f00000103a0)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000022557c7f4c464834a18da3b19154b95500000000", 0x80, 0x1400}, {&(0x7f0000010420)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00mp\x00\x00\x00\x00\x00\x00wm\x00\x00\x00\x00\x00\x00og\x00\x00\x00\x00\x00\x00jp\x00\x00\x00\x00\x00\x00avi\x00\x00\x00\x00\x00m4v\x00\x00\x00\x00\x00m4p\x00\x00\x00\x00\x00mkv\x00\x00\x00\x00\x00mov\x00\x00\x00\x00\x00webm\x00\x00\x00\x00wav\x00\x00\x00\x00\x00m4a\x00\x00\x00\x00\x003gp\x00\x00\x00\x00\x00opus\x00\x00\x00\x00flac\x00\x00\x00\x00gif\x00\x00\x00\x00\x00png\x00\x00\x00\x00\x00svg\x00\x00\x00\x00\x00webp\x00\x00\x00\x00jar\x00\x00\x00\x00\x00deb\x00\x00\x00\x00\x00iso\x00\x00\x00\x00\x00gz\x00\x00\x00\x00\x00\x00xz\x00\x00\x00\x00\x00\x00zst\x00\x00\x00\x00\x00pdf\x00\x00\x00\x00\x00pyc\x00\x00\x00\x00\x00ttc\x00\x00\x00\x00\x00ttf\x00\x00\x00\x00\x00exe\x00\x00\x00\x00\x00apk\x00\x00\x00\x00\x00cnt\x00\x00\x00\x00\x00exo\x00\x00\x00\x00\x00odex\x00\x00\x00\x00vdex\x00\x00\x00\x00so\x00\x00\x00\x00\x00\x00cold\x00\x00\x00\x00db\x00'/352, 0x160, 0x1860}, {&(0x7f0000010580)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0x1a80}, {&(0x7f0000010640)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0x1b80}, {&(0x7f0000010700)='\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1c80}, {&(0x7f0000010720)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010a80)="0000000000000000000000000000000000000000000000000000000100000000b1da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/224, 0xe0, 0x2532}, {&(0x7f0000010740)="b1da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/192, 0xc0, 0x200000}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000382c77a20000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010840)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000001400", 0xc0, 0x2011e0}, {&(0x7f0000010900)="000000000000000300000004007800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000500000000080000000000", 0x60, 0x2012e0}, {&(0x7f0000010960)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000010980)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f00000109c0)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000000900)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000010b60)="00000000000000000000000000000000000000000000000000000000382c77a2", 0x20, 0x205fe0}, {&(0x7f0000010b80)="b1da173e382c77a200"/32, 0x20, 0x3ff000}, {&(0x7f0000010ba0)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000000a00)="b0da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/192, 0xc0, 0x400000}, {&(0x7f0000010cc0)="000000000000000000000000000000000000000000000000000000005e2ecb6b0000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000001400", 0xc0, 0x4011e0}, {&(0x7f0000010dc0)="000000000000000300000004007800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000500000000080000000000", 0x60, 0x4012e0}, {&(0x7f0000010e20)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000010e40)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000010e80)="030000000000000300000000000600000000000000000000000000fff7000000", 0x20, 0x402000}, {&(0x7f0000010ea0)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000010f20)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000010f40)="0000000000000000000000000000000000000000000000000000000100000000b0da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/224, 0xe0, 0x404fe0}, {&(0x7f0000011020)="000000000000000000000000000000000000000000000000000000005e2ecb6b", 0x20, 0x405fe0}, {&(0x7f0000000140)="b0da8ef35e2ecb6b000000000000000000000000000000000000000000000000a5d99c0d43aee315bf34b14db11d588cc6bc7b", 0x33, 0x5ff000}, {&(0x7f0000011060)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f00000110c0)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000011120)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000011180)="ed41002080761000535f010003000000001000000000000002000000000000005e1f1f6300000000651f1f6300000000651f1f630000000000000000c9675f30c9675f30000000000100"/96, 0x60, 0x1001000}, {&(0x7f00000111e0)="000000000000000004000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000011200)="0000000000000000030000000300000000000000adda173e0000000002100000ed4100250000000000000000020000007c0d0000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30c76f1e44000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000000940)="00000000000000002400000000000000000000000000000000000000000000000000000000000000000cbc7ff08b5305ff15d7a61a574c00000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dceceda450600000005000700000000", 0x90, 0x1002160}, {&(0x7f0000011320)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00'/64, 0x40, 0x1002960}, {&(0x7f0000000080)="000000000000000004000000040000000000000000000310000021c889933292eab88506c2bf4b219e41586b2ee7e0c3b5dc950e5fe51ed5d17fe4532cc4dda633133cc8325e596aaae7bf8240bdeba0be9e65d43d3b16139a6e1e7481364cab100c31c38db2492eb6b5719ceb4d", 0x6e, 0x1002fe0}, {&(0x7f0000011380)="ed81002b0000000000000000010000001a040000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f305ee78c74000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1120, 0x460, 0x1200160}, {&(0x7f0000011860)="0000000000000000050000000500000001000000adda173e0000000001120000ffa1002b00000000000000000100000027000000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30f1689d18000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000011900)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen2941961749/file0/file0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x60, 0x1201160}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00\x00\x00\x00\x00\x00', 0x40, 0x1202160}, {&(0x7f0000011a40)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000011aa0)="0000000000000000070000000700000001000000adda173e0000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000011ac0)="ed81012b00000000000000000100000064000000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30559f02d3000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1203ffc}, {&(0x7f0000011b40)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/160, 0xa0, 0x1204160}, {&(0x7f0000011be0)="0000000000000000090000000900000001000000adda173e0000000005120000ed81022100000000000000000200000028230000000000000400000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30b41fa909000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000011c80)="02160000030000002400000000000000000000000000000000000000000000000000000000000000000000000216000003160000041600"/64, 0x40, 0x1205160}, {&(0x7f0000011cc0)="0000000000000000080000000800000001000000aeda173eb7c33c1906120000", 0x20, 0x1205fe0}, {&(0x7f0000011ce0)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000011d60)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000000000000000003f10e2d7428f7ff99d98cd1cdc1e2fa50407dbc95739e020b95176c1ba732becc3dddfc7f17060f6312da454cb4a8a8d4042fb51bc0fa9607ec5cbef3456ef2ada10e34603b0c115ab20b4fa4bd6fd3a18b258dff7e760d071cb590bc838aaeb1d95d3881cf5e0d603cec2940e27ddf93e7e2a9e39e4b06ba0bc7b365a4e0e5aa57acbe090e4bc0318bf1cba3724282c64acc31060d2e76ba7fca4d49896b879ec7007728c7a"], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000008c0)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {0x1, 0xd}, [{0x2, 0x6, 0xee00}, {0x2, 0x3, 0xee01}, {0x2, 0x2, r0}], {0x4, 0x6}, [{0x8, 0x1}, {0x8, 0x0, r1}], {}, {0x20, 0x5}}, 0x4c, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r6, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r2, r3]}, 0x5) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8f7a, 0x77, 0x0, 0x2, 0xf, "2e2e23c7c0fa20d1eb0a28aa828dd0a6dbdac4"}) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) 12:14:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:09 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @default, @rose, @null, @remote, @rose, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 782.849431][T21808] loop4: detected capacity change from 0 to 87 12:14:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8f7a, 0x77, 0x0, 0x2, 0xf, "2e2e23c7c0fa20d1eb0a28aa828dd0a6dbdac4"}) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) tkill(r2, 0x14) (rerun: 32) 12:14:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = timerfd_create(0x9, 0x800) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1, 0xfd88, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipmr_newroute={0x54, 0x18, 0x10, 0x70bd29, 0x25dfdbfe, {0x80, 0x20, 0x20, 0x3, 0xfc, 0x0, 0xfe, 0x1, 0x1500}, [@RTA_TABLE={0x8, 0xf, 0x8}, @RTA_FLOW={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_UID={0x8, 0x19, r4}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc040) [ 782.919767][ T26] audit: type=1804 audit(1667996049.773:1279): pid=21808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1139/file1/bus" dev="loop4" ino=1048938 res=1 errno=0 12:14:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 783.007266][T21817] serio: Serial port pts0 [ 783.027200][ T26] audit: type=1804 audit(1667996049.813:1280): pid=21808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1139/file1/bus" dev="loop4" ino=1048938 res=1 errno=0 12:14:09 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:09 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x700, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x81, 0x7, 0x3, 0x401, 0xe, "06ee3e5916dbf179ba2bbe04b1692cfdf1b6db"}) tkill(r2, 0x14) timer_create(0x6, &(0x7f0000000080)={0x0, 0x5, 0x1, @tid=r2}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) timer_create(0x2, &(0x7f0000000400)={0x0, 0xc, 0x1, @thr={&(0x7f00000002c0)="b162221cdc59e763fc342f45c086e7f73f56ee", &(0x7f0000000300)="3d63081d91c27864488f6781308eee9ee49e083378b6b03803efb54f6f144bd3dffc7b7ca8faee0091985ca9538aed9dda69d4406c9a84ca3d14988bacaef9aae9ea746b75e302b7afa3700cf2e611bfceac19109a6851acb6b9f9a3343ee214278b05158e562794776f18b67df974c177ec403c76e4d169ec6ae31b780dd16a9363354eaa0027478d7025e5d18a83eef733c61df1955deb93be8c94a3bdb44b8d2a9d2abbaa8ee119a4bc0d81542d8b56f79dfe22b90bee46d679aa2432b3590c9727"}}, &(0x7f0000000440)=0x0) timer_settime(r7, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, &(0x7f00000004c0)) 12:14:10 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xd80) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x3d, &(0x7f0000000200)=[{&(0x7f0000010a00)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x1e}, {&(0x7f0000010000)="1020f5f201000e00090000000300000010000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000022557c7f4c464834a18da3b19154b95500000000", 0x80, 0x400}, {&(0x7f0000010080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00mp\x00\x00\x00\x00\x00\x00wm\x00\x00\x00\x00\x00\x00og\x00\x00\x00\x00\x00\x00jp\x00\x00\x00\x00\x00\x00avi\x00\x00\x00\x00\x00m4v\x00\x00\x00\x00\x00m4p\x00\x00\x00\x00\x00mkv\x00\x00\x00\x00\x00mov\x00\x00\x00\x00\x00webm\x00\x00\x00\x00wav\x00\x00\x00\x00\x00m4a\x00\x00\x00\x00\x003gp\x00\x00\x00\x00\x00opus\x00\x00\x00\x00flac\x00\x00\x00\x00gif\x00\x00\x00\x00\x00png\x00\x00\x00\x00\x00svg\x00\x00\x00\x00\x00webp\x00\x00\x00\x00jar\x00\x00\x00\x00\x00deb\x00\x00\x00\x00\x00iso\x00\x00\x00\x00\x00gz\x00\x00\x00\x00\x00\x00xz\x00\x00\x00\x00\x00\x00zst\x00\x00\x00\x00\x00pdf\x00\x00\x00\x00\x00pyc\x00\x00\x00\x00\x00ttc\x00\x00\x00\x00\x00ttf\x00\x00\x00\x00\x00exe\x00\x00\x00\x00\x00apk\x00\x00\x00\x00\x00cnt\x00\x00\x00\x00\x00exo\x00\x00\x00\x00\x00odex\x00\x00\x00\x00vdex\x00\x00\x00\x00so\x00\x00\x00\x00\x00\x00cold\x00\x00\x00\x00db\x00'/352, 0x160, 0x860}, {&(0x7f00000101e0)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0xa80}, {&(0x7f00000102a0)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0xb80}, {&(0x7f0000000c00)="0000000000000000000000000000005cbed2b6f0e7a58a8ad0ddc32ee9da62a615dbf0437d4dec34afb1b0852b1a76d3cdcaa5753c32edd957aa7568800eed7a797c5087c177754cfaff5ddb3ba6dd084d523b7aa7f159abf6aee38a48b6a15a4d49c5c835739089a09eeb95382ee0d55adf966099243251eeee84cf0a1bd3e5f6482d259789eea5602bf61b38a731250af0921c3c0d585af9fb9e1cead8c42614eb700cda4febba20fe27e55bb9d131c9344fcd2225d1d9e40d58875f4b7bad2826021ffe4e6867b8e1c4", 0xcb, 0xc80}, {&(0x7f0000010380)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f00000103a0)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000022557c7f4c464834a18da3b19154b95500000000", 0x80, 0x1400}, {&(0x7f0000010420)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00mp\x00\x00\x00\x00\x00\x00wm\x00\x00\x00\x00\x00\x00og\x00\x00\x00\x00\x00\x00jp\x00\x00\x00\x00\x00\x00avi\x00\x00\x00\x00\x00m4v\x00\x00\x00\x00\x00m4p\x00\x00\x00\x00\x00mkv\x00\x00\x00\x00\x00mov\x00\x00\x00\x00\x00webm\x00\x00\x00\x00wav\x00\x00\x00\x00\x00m4a\x00\x00\x00\x00\x003gp\x00\x00\x00\x00\x00opus\x00\x00\x00\x00flac\x00\x00\x00\x00gif\x00\x00\x00\x00\x00png\x00\x00\x00\x00\x00svg\x00\x00\x00\x00\x00webp\x00\x00\x00\x00jar\x00\x00\x00\x00\x00deb\x00\x00\x00\x00\x00iso\x00\x00\x00\x00\x00gz\x00\x00\x00\x00\x00\x00xz\x00\x00\x00\x00\x00\x00zst\x00\x00\x00\x00\x00pdf\x00\x00\x00\x00\x00pyc\x00\x00\x00\x00\x00ttc\x00\x00\x00\x00\x00ttf\x00\x00\x00\x00\x00exe\x00\x00\x00\x00\x00apk\x00\x00\x00\x00\x00cnt\x00\x00\x00\x00\x00exo\x00\x00\x00\x00\x00odex\x00\x00\x00\x00vdex\x00\x00\x00\x00so\x00\x00\x00\x00\x00\x00cold\x00\x00\x00\x00db\x00'/352, 0x160, 0x1860}, {&(0x7f0000010580)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0x1a80}, {&(0x7f0000010640)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0x1b80}, {&(0x7f0000010700)='\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1c80}, {&(0x7f0000010720)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010a80)="0000000000000000000000000000000000000000000000000000000100000000b1da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/224, 0xe0, 0x2532}, {&(0x7f0000010740)="b1da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/192, 0xc0, 0x200000}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000382c77a20000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010840)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000001400", 0xc0, 0x2011e0}, {&(0x7f0000010900)="000000000000000300000004007800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000500000000080000000000", 0x60, 0x2012e0}, {&(0x7f0000010960)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000010980)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f00000109c0)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000000900)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000010b60)="00000000000000000000000000000000000000000000000000000000382c77a2", 0x20, 0x205fe0}, {&(0x7f0000010b80)="b1da173e382c77a200"/32, 0x20, 0x3ff000}, {&(0x7f0000010ba0)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000000a00)="b0da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/192, 0xc0, 0x400000}, {&(0x7f0000010cc0)="000000000000000000000000000000000000000000000000000000005e2ecb6b0000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000001400", 0xc0, 0x4011e0}, {&(0x7f0000010dc0)="000000000000000300000004007800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000500000000080000000000", 0x60, 0x4012e0}, {&(0x7f0000010e20)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000010e40)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000010e80)="030000000000000300000000000600000000000000000000000000fff7000000", 0x20, 0x402000}, {&(0x7f0000010ea0)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000010f20)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000010f40)="0000000000000000000000000000000000000000000000000000000100000000b0da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/224, 0xe0, 0x404fe0}, {&(0x7f0000011020)="000000000000000000000000000000000000000000000000000000005e2ecb6b", 0x20, 0x405fe0}, {&(0x7f0000000140)="b0da8ef35e2ecb6b000000000000000000000000000000000000000000000000a5d99c0d43aee315bf34b14db11d588cc6bc7b", 0x33, 0x5ff000}, {&(0x7f0000011060)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f00000110c0)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000011120)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000011180)="ed41002080761000535f010003000000001000000000000002000000000000005e1f1f6300000000651f1f6300000000651f1f630000000000000000c9675f30c9675f30000000000100"/96, 0x60, 0x1001000}, {&(0x7f00000111e0)="000000000000000004000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000011200)="0000000000000000030000000300000000000000adda173e0000000002100000ed4100250000000000000000020000007c0d0000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30c76f1e44000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000000940)="00000000000000002400000000000000000000000000000000000000000000000000000000000000000cbc7ff08b5305ff15d7a61a574c00000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dceceda450600000005000700000000", 0x90, 0x1002160}, {&(0x7f0000011320)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00'/64, 0x40, 0x1002960}, {&(0x7f0000000080)="000000000000000004000000040000000000000000000310000021c889933292eab88506c2bf4b219e41586b2ee7e0c3b5dc950e5fe51ed5d17fe4532cc4dda633133cc8325e596aaae7bf8240bdeba0be9e65d43d3b16139a6e1e7481364cab100c31c38db2492eb6b5719ceb4d", 0x6e, 0x1002fe0}, {&(0x7f0000011380)="ed81002b0000000000000000010000001a040000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f305ee78c74000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1120, 0x460, 0x1200160}, {&(0x7f0000011860)="0000000000000000050000000500000001000000adda173e0000000001120000ffa1002b00000000000000000100000027000000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30f1689d18000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000011900)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen2941961749/file0/file0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x60, 0x1201160}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00\x00\x00\x00\x00\x00', 0x40, 0x1202160}, {&(0x7f0000011a40)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000011aa0)="0000000000000000070000000700000001000000adda173e0000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000011ac0)="ed81012b00000000000000000100000064000000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30559f02d3000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1203ffc}, {&(0x7f0000011b40)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/160, 0xa0, 0x1204160}, {&(0x7f0000011be0)="0000000000000000090000000900000001000000adda173e0000000005120000ed81022100000000000000000200000028230000000000000400000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30b41fa909000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000011c80)="02160000030000002400000000000000000000000000000000000000000000000000000000000000000000000216000003160000041600"/64, 0x40, 0x1205160}, {&(0x7f0000011cc0)="0000000000000000080000000800000001000000aeda173eb7c33c1906120000", 0x20, 0x1205fe0}, {&(0x7f0000011ce0)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000011d60)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000000000000000003f10e2d7428f7ff99d98cd1cdc1e2fa50407dbc95739e020b95176c1ba732becc3dddfc7f17060f6312da454cb4a8a8d4042fb51bc0fa9607ec5cbef3456ef2ada10e34603b0c115ab20b4fa4bd6fd3a18b258dff7e760d071cb590bc838aaeb1d95d3881cf5e0d603cec2940e27ddf93e7e2a9e39e4b06ba0bc7b365a4e0e5aa57acbe090e4bc0318bf1cba3724282c64acc31060d2e76ba7fca4d49896b879ec7007728c7a"], 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000008c0)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {0x1, 0xd}, [{0x2, 0x6, 0xee00}, {0x2, 0x3, 0xee01}, {0x2, 0x2, r0}], {0x4, 0x6}, [{0x8, 0x1}, {0x8, 0x0, r1}], {}, {0x20, 0x5}}, 0x4c, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r6, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:10 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 783.227803][T21826] serio: Serial port pts0 [ 783.237357][T21828] loop4: detected capacity change from 0 to 87 12:14:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:10 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:10 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xd80) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x3d, &(0x7f0000000200)=[{&(0x7f0000010a00)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x1e}, {&(0x7f0000010000)="1020f5f201000e00090000000300000010000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000022557c7f4c464834a18da3b19154b95500000000", 0x80, 0x400}, {&(0x7f0000010080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00mp\x00\x00\x00\x00\x00\x00wm\x00\x00\x00\x00\x00\x00og\x00\x00\x00\x00\x00\x00jp\x00\x00\x00\x00\x00\x00avi\x00\x00\x00\x00\x00m4v\x00\x00\x00\x00\x00m4p\x00\x00\x00\x00\x00mkv\x00\x00\x00\x00\x00mov\x00\x00\x00\x00\x00webm\x00\x00\x00\x00wav\x00\x00\x00\x00\x00m4a\x00\x00\x00\x00\x003gp\x00\x00\x00\x00\x00opus\x00\x00\x00\x00flac\x00\x00\x00\x00gif\x00\x00\x00\x00\x00png\x00\x00\x00\x00\x00svg\x00\x00\x00\x00\x00webp\x00\x00\x00\x00jar\x00\x00\x00\x00\x00deb\x00\x00\x00\x00\x00iso\x00\x00\x00\x00\x00gz\x00\x00\x00\x00\x00\x00xz\x00\x00\x00\x00\x00\x00zst\x00\x00\x00\x00\x00pdf\x00\x00\x00\x00\x00pyc\x00\x00\x00\x00\x00ttc\x00\x00\x00\x00\x00ttf\x00\x00\x00\x00\x00exe\x00\x00\x00\x00\x00apk\x00\x00\x00\x00\x00cnt\x00\x00\x00\x00\x00exo\x00\x00\x00\x00\x00odex\x00\x00\x00\x00vdex\x00\x00\x00\x00so\x00\x00\x00\x00\x00\x00cold\x00\x00\x00\x00db\x00'/352, 0x160, 0x860}, {&(0x7f00000101e0)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0xa80}, {&(0x7f00000102a0)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0xb80}, {&(0x7f0000000c00)="0000000000000000000000000000005cbed2b6f0e7a58a8ad0ddc32ee9da62a615dbf0437d4dec34afb1b0852b1a76d3cdcaa5753c32edd957aa7568800eed7a797c5087c177754cfaff5ddb3ba6dd084d523b7aa7f159abf6aee38a48b6a15a4d49c5c835739089a09eeb95382ee0d55adf966099243251eeee84cf0a1bd3e5f6482d259789eea5602bf61b38a731250af0921c3c0d585af9fb9e1cead8c42614eb700cda4febba20fe27e55bb9d131c9344fcd2225d1d9e40d58875f4b7bad2826021ffe4e6867b8e1c4", 0xcb, 0xc80}, {&(0x7f0000010380)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f00000103a0)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000022557c7f4c464834a18da3b19154b95500000000", 0x80, 0x1400}, {&(0x7f0000010420)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00mp\x00\x00\x00\x00\x00\x00wm\x00\x00\x00\x00\x00\x00og\x00\x00\x00\x00\x00\x00jp\x00\x00\x00\x00\x00\x00avi\x00\x00\x00\x00\x00m4v\x00\x00\x00\x00\x00m4p\x00\x00\x00\x00\x00mkv\x00\x00\x00\x00\x00mov\x00\x00\x00\x00\x00webm\x00\x00\x00\x00wav\x00\x00\x00\x00\x00m4a\x00\x00\x00\x00\x003gp\x00\x00\x00\x00\x00opus\x00\x00\x00\x00flac\x00\x00\x00\x00gif\x00\x00\x00\x00\x00png\x00\x00\x00\x00\x00svg\x00\x00\x00\x00\x00webp\x00\x00\x00\x00jar\x00\x00\x00\x00\x00deb\x00\x00\x00\x00\x00iso\x00\x00\x00\x00\x00gz\x00\x00\x00\x00\x00\x00xz\x00\x00\x00\x00\x00\x00zst\x00\x00\x00\x00\x00pdf\x00\x00\x00\x00\x00pyc\x00\x00\x00\x00\x00ttc\x00\x00\x00\x00\x00ttf\x00\x00\x00\x00\x00exe\x00\x00\x00\x00\x00apk\x00\x00\x00\x00\x00cnt\x00\x00\x00\x00\x00exo\x00\x00\x00\x00\x00odex\x00\x00\x00\x00vdex\x00\x00\x00\x00so\x00\x00\x00\x00\x00\x00cold\x00\x00\x00\x00db\x00'/352, 0x160, 0x1860}, {&(0x7f0000010580)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0x1a80}, {&(0x7f0000010640)='\x00\x00\x00\x00Linux version 5.17.11-1rodete2-amd64 (glinux-team@google.com) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP PREEMPT Debian 5.17.11-1rodete2 (2022-06-09)\x00', 0xc0, 0x1b80}, {&(0x7f0000010700)='\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1c80}, {&(0x7f0000010720)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010a80)="0000000000000000000000000000000000000000000000000000000100000000b1da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/224, 0xe0, 0x2532}, {&(0x7f0000010740)="b1da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/192, 0xc0, 0x200000}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000382c77a20000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010840)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000001400", 0xc0, 0x2011e0}, {&(0x7f0000010900)="000000000000000300000004007800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000500000000080000000000", 0x60, 0x2012e0}, {&(0x7f0000010960)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000010980)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f00000109c0)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000000900)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000010b60)="00000000000000000000000000000000000000000000000000000000382c77a2", 0x20, 0x205fe0}, {&(0x7f0000010b80)="b1da173e382c77a200"/32, 0x20, 0x3ff000}, {&(0x7f0000010ba0)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000000a00)="b0da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/192, 0xc0, 0x400000}, {&(0x7f0000010cc0)="000000000000000000000000000000000000000000000000000000005e2ecb6b0000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000001400", 0xc0, 0x4011e0}, {&(0x7f0000010dc0)="000000000000000300000004007800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000500000000080000000000", 0x60, 0x4012e0}, {&(0x7f0000010e20)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000010e40)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000010e80)="030000000000000300000000000600000000000000000000000000fff7000000", 0x20, 0x402000}, {&(0x7f0000010ea0)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000010f20)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000010f40)="0000000000000000000000000000000000000000000000000000000100000000b0da173e0000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00000100"/224, 0xe0, 0x404fe0}, {&(0x7f0000011020)="000000000000000000000000000000000000000000000000000000005e2ecb6b", 0x20, 0x405fe0}, {&(0x7f0000000140)="b0da8ef35e2ecb6b000000000000000000000000000000000000000000000000a5d99c0d43aee315bf34b14db11d588cc6bc7b", 0x33, 0x5ff000}, {&(0x7f0000011060)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f00000110c0)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000011120)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000011180)="ed41002080761000535f010003000000001000000000000002000000000000005e1f1f6300000000651f1f6300000000651f1f630000000000000000c9675f30c9675f30000000000100"/96, 0x60, 0x1001000}, {&(0x7f00000111e0)="000000000000000004000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000011200)="0000000000000000030000000300000000000000adda173e0000000002100000ed4100250000000000000000020000007c0d0000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30c76f1e44000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000000940)="00000000000000002400000000000000000000000000000000000000000000000000000000000000000cbc7ff08b5305ff15d7a61a574c00000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dceceda450600000005000700000000", 0x90, 0x1002160}, {&(0x7f0000011320)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00'/64, 0x40, 0x1002960}, {&(0x7f0000000080)="000000000000000004000000040000000000000000000310000021c889933292eab88506c2bf4b219e41586b2ee7e0c3b5dc950e5fe51ed5d17fe4532cc4dda633133cc8325e596aaae7bf8240bdeba0be9e65d43d3b16139a6e1e7481364cab100c31c38db2492eb6b5719ceb4d", 0x6e, 0x1002fe0}, {&(0x7f0000011380)="ed81002b0000000000000000010000001a040000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f305ee78c74000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1120, 0x460, 0x1200160}, {&(0x7f0000011860)="0000000000000000050000000500000001000000adda173e0000000001120000ffa1002b00000000000000000100000027000000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30f1689d18000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000011900)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen2941961749/file0/file0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x60, 0x1201160}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00\x00\x00\x00\x00\x00', 0x40, 0x1202160}, {&(0x7f0000011a40)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000011aa0)="0000000000000000070000000700000001000000adda173e0000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000011ac0)="ed81012b00000000000000000100000064000000000000000100000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30559f02d3000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1203ffc}, {&(0x7f0000011b40)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/160, 0xa0, 0x1204160}, {&(0x7f0000011be0)="0000000000000000090000000900000001000000adda173e0000000005120000ed81022100000000000000000200000028230000000000000400000000000000651f1f6300000000651f1f6300000000651f1f6300000000c9675f30c9675f30c9675f30b41fa909000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000011c80)="02160000030000002400000000000000000000000000000000000000000000000000000000000000000000000216000003160000041600"/64, 0x40, 0x1205160}, {&(0x7f0000011cc0)="0000000000000000080000000800000001000000aeda173eb7c33c1906120000", 0x20, 0x1205fe0}, {&(0x7f0000011ce0)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000011d60)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000000000000000003f10e2d7428f7ff99d98cd1cdc1e2fa50407dbc95739e020b95176c1ba732becc3dddfc7f17060f6312da454cb4a8a8d4042fb51bc0fa9607ec5cbef3456ef2ada10e34603b0c115ab20b4fa4bd6fd3a18b258dff7e760d071cb590bc838aaeb1d95d3881cf5e0d603cec2940e27ddf93e7e2a9e39e4b06ba0bc7b365a4e0e5aa57acbe090e4bc0318bf1cba3724282c64acc31060d2e76ba7fca4d49896b879ec7007728c7a"], 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000008c0)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {0x1, 0xd}, [{0x2, 0x6, 0xee00}, {0x2, 0x3, 0xee01}, {0x2, 0x2, r0}], {0x4, 0x6}, [{0x8, 0x1}, {0x8, 0x0, r1}], {}, {0x20, 0x5}}, 0x4c, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r6, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x81, 0x7, 0x3, 0x401, 0xe, "06ee3e5916dbf179ba2bbe04b1692cfdf1b6db"}) tkill(r2, 0x14) (async) timer_create(0x6, &(0x7f0000000080)={0x0, 0x5, 0x1, @tid=r2}, &(0x7f0000000100)=0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) (async) timer_create(0x2, &(0x7f0000000400)={0x0, 0xc, 0x1, @thr={&(0x7f00000002c0)="b162221cdc59e763fc342f45c086e7f73f56ee", &(0x7f0000000300)="3d63081d91c27864488f6781308eee9ee49e083378b6b03803efb54f6f144bd3dffc7b7ca8faee0091985ca9538aed9dda69d4406c9a84ca3d14988bacaef9aae9ea746b75e302b7afa3700cf2e611bfceac19109a6851acb6b9f9a3343ee214278b05158e562794776f18b67df974c177ec403c76e4d169ec6ae31b780dd16a9363354eaa0027478d7025e5d18a83eef733c61df1955deb93be8c94a3bdb44b8d2a9d2abbaa8ee119a4bc0d81542d8b56f79dfe22b90bee46d679aa2432b3590c9727"}}, &(0x7f0000000440)=0x0) timer_settime(r7, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, &(0x7f00000004c0)) 12:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) r1 = timerfd_create(0x9, 0x800) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1, 0xfd88, 0x8) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipmr_newroute={0x54, 0x18, 0x10, 0x70bd29, 0x25dfdbfe, {0x80, 0x20, 0x20, 0x3, 0xfc, 0x0, 0xfe, 0x1, 0x1500}, [@RTA_TABLE={0x8, 0xf, 0x8}, @RTA_FLOW={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_UID={0x8, 0x19, r4}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc040) 12:14:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:14 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xa00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:14 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:14 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x81, 0x7, 0x3, 0x401, 0xe, "06ee3e5916dbf179ba2bbe04b1692cfdf1b6db"}) tkill(r2, 0x14) (async) timer_create(0x6, &(0x7f0000000080)={0x0, 0x5, 0x1, @tid=r2}, &(0x7f0000000100)=0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) (async) timer_create(0x2, &(0x7f0000000400)={0x0, 0xc, 0x1, @thr={&(0x7f00000002c0)="b162221cdc59e763fc342f45c086e7f73f56ee", &(0x7f0000000300)="3d63081d91c27864488f6781308eee9ee49e083378b6b03803efb54f6f144bd3dffc7b7ca8faee0091985ca9538aed9dda69d4406c9a84ca3d14988bacaef9aae9ea746b75e302b7afa3700cf2e611bfceac19109a6851acb6b9f9a3343ee214278b05158e562794776f18b67df974c177ec403c76e4d169ec6ae31b780dd16a9363354eaa0027478d7025e5d18a83eef733c61df1955deb93be8c94a3bdb44b8d2a9d2abbaa8ee119a4bc0d81542d8b56f79dfe22b90bee46d679aa2432b3590c9727"}}, &(0x7f0000000440)=0x0) timer_settime(r7, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, &(0x7f00000004c0)) 12:14:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:14 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 787.313029][T21863] loop4: detected capacity change from 0 to 87 12:14:14 executing program 3: r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc880, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) [ 787.399706][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 787.399723][ T26] audit: type=1804 audit(1667996054.253:1283): pid=21863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1141/file1/bus" dev="loop4" ino=1048940 res=1 errno=0 12:14:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 787.489062][ T26] audit: type=1804 audit(1667996054.303:1284): pid=21863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1141/file1/bus" dev="loop4" ino=1048940 res=1 errno=0 12:14:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) r1 = timerfd_create(0x9, 0x800) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1, 0xfd88, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipmr_newroute={0x54, 0x18, 0x10, 0x70bd29, 0x25dfdbfe, {0x80, 0x20, 0x20, 0x3, 0xfc, 0x0, 0xfe, 0x1, 0x1500}, [@RTA_TABLE={0x8, 0xf, 0x8}, @RTA_FLOW={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_UID={0x8, 0x19, r4}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, @RTA_SRC={0x8, 0x2, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc040) 12:14:20 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xb00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc880, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc880, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:14:20 executing program 3: r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:20 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 793.710979][T21896] loop4: detected capacity change from 0 to 87 12:14:20 executing program 3: r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6901, 0xb947, 0xf, &(0x7f0000000040), 0x8) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x10, 0x0, 0x9, "7d1910890b4db61f67b0af9fec1408567e3b315b131905c800444216b406e1db"}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 793.783884][T21897] ptm ptm0: ldisc open failed (-12), clearing slot 0 12:14:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc880, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc880, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:14:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 793.812238][ T26] audit: type=1804 audit(1667996060.663:1285): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1142/file1/bus" dev="loop4" ino=1048941 res=1 errno=0 12:14:20 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xd00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 793.917039][ T26] audit: type=1804 audit(1667996060.663:1286): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1142/file1/bus" dev="loop4" ino=1048941 res=1 errno=0 [ 793.998883][T21933] loop4: detected capacity change from 0 to 87 [ 794.080462][ T26] audit: type=1804 audit(1667996060.933:1287): pid=21933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1143/file1/bus" dev="loop4" ino=1048942 res=1 errno=0 [ 794.142256][ T26] audit: type=1804 audit(1667996060.963:1288): pid=21933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1143/file1/bus" dev="loop4" ino=1048942 res=1 errno=0 12:14:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480281, 0x0) flistxattr(r0, &(0x7f0000000100)=""/36, 0x24) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:14:24 executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, 0x0, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6901, 0xb947, 0xf, &(0x7f0000000040), 0x8) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x10, 0x0, 0x9, "7d1910890b4db61f67b0af9fec1408567e3b315b131905c800444216b406e1db"}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x6901, 0xb947, 0xf, &(0x7f0000000040), 0x8) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x10, 0x0, 0x9, "7d1910890b4db61f67b0af9fec1408567e3b315b131905c800444216b406e1db"}) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:24 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{0x0, 0x2, 0x40, 0x1, 0xffff, 0x71f9, 0x7, 0x8001, 0x400, 0x753, 0x5, 0x10000, 0x4, 0x7}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4003, 0x8, 0x0, 0x5, 0x0, "001ec38fc200"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x488080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_open_pts(r1, 0x4000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000001280)=@qipcrtr, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f0000001380)=""/25, 0x19}, {&(0x7f00000013c0)=""/48, 0x30}, {&(0x7f0000001400)=""/40, 0x28}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/79, 0x4f}, {&(0x7f00000024c0)=""/238, 0xee}], 0x7, &(0x7f0000002640)=""/168, 0xa8}, 0x83cff4e99957636a) r4 = syz_open_pts(r0, 0x440000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x4) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_open_pts(r5, 0x185901) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) 12:14:24 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xe00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, 0x0, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 797.966781][T21949] loop4: detected capacity change from 0 to 87 12:14:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x6901, 0xb947, 0xf, &(0x7f0000000040), 0x8) (async, rerun: 32) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x10, 0x0, 0x9, "7d1910890b4db61f67b0af9fec1408567e3b315b131905c800444216b406e1db"}) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:24 executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 798.005641][ T26] audit: type=1804 audit(1667996064.853:1289): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1144/file1/bus" dev="loop4" ino=1048943 res=1 errno=0 12:14:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, 0x0, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:24 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xff6, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:25 executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 798.105009][ T26] audit: type=1804 audit(1667996064.863:1290): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1144/file1/bus" dev="loop4" ino=1048943 res=1 errno=0 [ 798.230914][T21968] loop4: detected capacity change from 0 to 87 [ 798.265767][ T26] audit: type=1804 audit(1667996065.113:1291): pid=21968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1145/file1/bus" dev="loop4" ino=1048944 res=1 errno=0 [ 798.343705][ T26] audit: type=1804 audit(1667996065.163:1292): pid=21968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1145/file1/bus" dev="loop4" ino=1048944 res=1 errno=0 12:14:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480281, 0x0) flistxattr(r0, &(0x7f0000000100)=""/36, 0x24) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480281, 0x0) (async) flistxattr(r0, &(0x7f0000000100)=""/36, 0x24) (async) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3e, 0x3ff) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) syz_open_procfs(r5, &(0x7f0000000000)='personality\x00') syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:34 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:34 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1100, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:34 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{0x0, 0x2, 0x40, 0x1, 0xffff, 0x71f9, 0x7, 0x8001, 0x400, 0x753, 0x5, 0x10000, 0x4, 0x7}}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4003, 0x8, 0x0, 0x5, 0x0, "001ec38fc200"}) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x488080, 0x0) (rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_open_pts(r1, 0x4000) (async, rerun: 64) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (rerun: 64) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000001280)=@qipcrtr, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f0000001380)=""/25, 0x19}, {&(0x7f00000013c0)=""/48, 0x30}, {&(0x7f0000001400)=""/40, 0x28}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/79, 0x4f}, {&(0x7f00000024c0)=""/238, 0xee}], 0x7, &(0x7f0000002640)=""/168, 0xa8}, 0x83cff4e99957636a) r4 = syz_open_pts(r0, 0x440000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x4) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_open_pts(r5, 0x185901) (async) read(r4, 0x0, 0x2006) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) (async, rerun: 32) openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) (rerun: 32) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(0x0, 0x14) 12:14:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3e, 0x3ff) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 64) syz_open_procfs(r5, &(0x7f0000000000)='personality\x00') (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:34 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 807.269426][T21980] loop4: detected capacity change from 0 to 87 12:14:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:34 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1300, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 807.356311][ T26] audit: type=1804 audit(1667996074.203:1293): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1146/file1/bus" dev="loop4" ino=1048945 res=1 errno=0 12:14:34 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{0x0, 0x2, 0x40, 0x1, 0xffff, 0x71f9, 0x7, 0x8001, 0x400, 0x753, 0x5, 0x10000, 0x4, 0x7}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4003, 0x8, 0x0, 0x5, 0x0, "001ec38fc200"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x488080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_open_pts(r1, 0x4000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000001280)=@qipcrtr, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f0000001380)=""/25, 0x19}, {&(0x7f00000013c0)=""/48, 0x30}, {&(0x7f0000001400)=""/40, 0x28}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/79, 0x4f}, {&(0x7f00000024c0)=""/238, 0xee}], 0x7, &(0x7f0000002640)=""/168, 0xa8}, 0x83cff4e99957636a) r4 = syz_open_pts(r0, 0x440000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x4) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_open_pts(r5, 0x185901) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{0x0, 0x2, 0x40, 0x1, 0xffff, 0x71f9, 0x7, 0x8001, 0x400, 0x753, 0x5, 0x10000, 0x4, 0x7}}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4003, 0x8, 0x0, 0x5, 0x0, "001ec38fc200"}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x488080, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_open_pts(r1, 0x4000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000001280)=@qipcrtr, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f0000001380)=""/25, 0x19}, {&(0x7f00000013c0)=""/48, 0x30}, {&(0x7f0000001400)=""/40, 0x28}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/79, 0x4f}, {&(0x7f00000024c0)=""/238, 0xee}], 0x7, &(0x7f0000002640)=""/168, 0xa8}, 0x83cff4e99957636a) (async) syz_open_pts(r0, 0x440000) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x4) (async) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_open_pts(r5, 0x185901) (async) read(r4, 0x0, 0x2006) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) (async) openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(0x0, 0x14) (async) [ 807.468571][ T26] audit: type=1804 audit(1667996074.213:1294): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1146/file1/bus" dev="loop4" ino=1048945 res=1 errno=0 [ 807.578137][T22000] loop4: detected capacity change from 0 to 87 [ 807.619022][ T26] audit: type=1804 audit(1667996074.473:1295): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1147/file1/bus" dev="loop4" ino=1048946 res=1 errno=0 [ 807.668001][ T26] audit: type=1804 audit(1667996074.503:1296): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1147/file1/bus" dev="loop4" ino=1048946 res=1 errno=0 [ 808.379920][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.386209][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 12:14:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480281, 0x0) flistxattr(r0, &(0x7f0000000100)=""/36, 0x24) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480281, 0x0) (async) flistxattr(r0, &(0x7f0000000100)=""/36, 0x24) (async) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:14:42 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3e, 0x3ff) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) syz_open_procfs(r5, &(0x7f0000000000)='personality\x00') syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) sendfile(r4, r0, &(0x7f0000000080)=0x3e, 0x3ff) (async) getpid() (async) sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) (async) syz_open_procfs(r5, &(0x7f0000000000)='personality\x00') (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:42 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1400, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x6, 0x401, 0x4, 0x80000000, 0x8, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x101, 0x1, {r2}, {0xffffffffffffffff}, 0xfff, 0x1}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x8240180, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x36}, &(0x7f0000000280)=""/110, 0xb2, &(0x7f0000000300)=""/96, &(0x7f0000000380)=[r3, r4], 0x2, {r5}}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000440)) 12:14:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:42 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x6, 0x401, 0x4, 0x80000000, 0x8, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x101, 0x1, {r2}, {0xffffffffffffffff}, 0xfff, 0x1}) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x8240180, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x36}, &(0x7f0000000280)=""/110, 0xb2, &(0x7f0000000300)=""/96, &(0x7f0000000380)=[r3, r4], 0x2, {r5}}, 0x58) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000440)) [ 815.634779][T22014] loop4: detected capacity change from 0 to 87 12:14:42 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./cgroup\x00', 0x80280, 0xb6) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0xf0000, 0x0, [0x9f, 0xffff, 0x400, 0x80000000, 0x6, 0x30000000000000, 0x7, 0x8]}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x1e, 0x7, 0x2, "10f979bc4fcedd21e929b96b31fb7af8b645e6ff91458a611386efb73ce49b83"}) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:42 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 815.686981][ T26] audit: type=1804 audit(1667996082.533:1297): pid=22014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1148/file1/bus" dev="loop4" ino=1048947 res=1 errno=0 12:14:42 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1600, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 815.809955][ T26] audit: type=1804 audit(1667996082.533:1298): pid=22014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1148/file1/bus" dev="loop4" ino=1048947 res=1 errno=0 [ 815.939882][T22038] loop4: detected capacity change from 0 to 87 [ 815.961023][ T26] audit: type=1804 audit(1667996082.813:1299): pid=22038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1149/file1/bus" dev="loop4" ino=1048948 res=1 errno=0 [ 816.010589][ T26] audit: type=1804 audit(1667996082.813:1300): pid=22038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1149/file1/bus" dev="loop4" ino=1048948 res=1 errno=0 12:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x6a2}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0xfffd, 0x7ff}, @mss={0x2, 0x4}, @window={0x3, 0x81}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x4000005, 0x0, 0x0) 12:14:52 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./cgroup\x00', 0x80280, 0xb6) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0xf0000, 0x0, [0x9f, 0xffff, 0x400, 0x80000000, 0x6, 0x30000000000000, 0x7, 0x8]}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x1e, 0x7, 0x2, "10f979bc4fcedd21e929b96b31fb7af8b645e6ff91458a611386efb73ce49b83"}) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./cgroup\x00', 0x80280, 0xb6) (async) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0xf0000, 0x0, [0x9f, 0xffff, 0x400, 0x80000000, 0x6, 0x30000000000000, 0x7, 0x8]}) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x1e, 0x7, 0x2, "10f979bc4fcedd21e929b96b31fb7af8b645e6ff91458a611386efb73ce49b83"}) (async) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x54}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x6, 0x401, 0x4, 0x80000000, 0x8, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x101, 0x1, {r2}, {0xffffffffffffffff}, 0xfff, 0x1}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x8240180, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x36}, &(0x7f0000000280)=""/110, 0xb2, &(0x7f0000000300)=""/96, &(0x7f0000000380)=[r3, r4], 0x2, {r5}}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000440)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x6, 0x401, 0x4, 0x80000000, 0x8, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x101, 0x1, {r2}, {0xffffffffffffffff}, 0xfff, 0x1}) (async) getpid() (async) sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x8240180, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x36}, &(0x7f0000000280)=""/110, 0xb2, &(0x7f0000000300)=""/96, &(0x7f0000000380)=[r3, r4], 0x2, {r5}}, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000440)) (async) 12:14:52 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:14:52 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1700, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:14:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:52 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 826.014944][T22054] loop4: detected capacity change from 0 to 87 12:14:52 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./cgroup\x00', 0x80280, 0xb6) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0xf0000, 0x0, [0x9f, 0xffff, 0x400, 0x80000000, 0x6, 0x30000000000000, 0x7, 0x8]}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x1e, 0x7, 0x2, "10f979bc4fcedd21e929b96b31fb7af8b645e6ff91458a611386efb73ce49b83"}) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./cgroup\x00', 0x80280, 0xb6) (async) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0xf0000, 0x0, [0x9f, 0xffff, 0x400, 0x80000000, 0x6, 0x30000000000000, 0x7, 0x8]}) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x1e, 0x7, 0x2, "10f979bc4fcedd21e929b96b31fb7af8b645e6ff91458a611386efb73ce49b83"}) (async) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:14:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) [ 826.103913][ T26] audit: type=1804 audit(1667996092.953:1301): pid=22054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1150/file1/bus" dev="loop4" ino=1048949 res=1 errno=0 12:14:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:14:53 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 826.211018][ T26] audit: type=1804 audit(1667996092.953:1302): pid=22054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1150/file1/bus" dev="loop4" ino=1048949 res=1 errno=0 12:15:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x6a2}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0xfffd, 0x7ff}, @mss={0x2, 0x4}, @window={0x3, 0x81}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x4000005, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x6a2}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0xfffd, 0x7ff}, @mss={0x2, 0x4}, @window={0x3, 0x81}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x4000005, 0x0, 0x0) (async) 12:15:04 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1900, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x40002de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x0}, &(0x7f0000003000/0x1000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:04 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:15:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:15:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 837.341064][T22100] loop4: detected capacity change from 0 to 87 12:15:04 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r0 = syz_io_uring_setup(0x40002de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x0}, &(0x7f0000003000/0x1000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) [ 837.379146][ T26] audit: type=1804 audit(1667996104.233:1303): pid=22100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1151/file1/bus" dev="loop4" ino=1048950 res=1 errno=0 12:15:04 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1a00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:15:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async, rerun: 32) r2 = gettid() (async, rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 64) tkill(r2, 0x14) [ 837.480055][ T26] audit: type=1804 audit(1667996104.233:1304): pid=22100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1151/file1/bus" dev="loop4" ino=1048950 res=1 errno=0 [ 837.648449][T22130] loop4: detected capacity change from 0 to 87 [ 837.749333][ T26] audit: type=1804 audit(1667996104.603:1305): pid=22130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1152/file1/bus" dev="loop4" ino=1048951 res=1 errno=0 [ 837.795226][ T26] audit: type=1804 audit(1667996104.603:1306): pid=22130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1152/file1/bus" dev="loop4" ino=1048951 res=1 errno=0 12:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x6a2}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0xfffd, 0x7ff}, @mss={0x2, 0x4}, @window={0x3, 0x81}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1b1, 0x4000005, 0x0, 0x0) 12:15:13 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:13 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x40002de9, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x0}, &(0x7f0000003000/0x1000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x4000050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:15:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x5, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:15:13 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1c00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:13 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) 12:15:13 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 846.704287][T22147] loop4: detected capacity change from 0 to 87 [ 846.716155][T22145] serio: Serial port pts0 [ 846.763055][ T26] audit: type=1804 audit(1667996113.613:1307): pid=22147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1153/file1/bus" dev="loop4" ino=1048952 res=1 errno=0 12:15:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 846.808766][ T26] audit: type=1804 audit(1667996113.613:1308): pid=22147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1153/file1/bus" dev="loop4" ino=1048952 res=1 errno=0 12:15:13 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) 12:15:13 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1d00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 846.981862][T22167] loop4: detected capacity change from 0 to 87 [ 847.009007][ T26] audit: type=1804 audit(1667996113.863:1309): pid=22167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1154/file1/bus" dev="loop4" ino=1048953 res=1 errno=0 [ 847.045852][ T26] audit: type=1804 audit(1667996113.893:1310): pid=22167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1154/file1/bus" dev="loop4" ino=1048953 res=1 errno=0 [ 854.459141][ T3690] kworker/dying (3690) used greatest stack depth: 21736 bytes left 12:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:15:22 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:15:22 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) 12:15:22 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x1f00, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x5, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x5, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:15:22 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:22 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0x1dcd, 0x5]) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) [ 856.009580][T22181] loop4: detected capacity change from 0 to 87 [ 856.027923][T22178] serio: Serial port pts0 12:15:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:15:23 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 856.102284][ T26] audit: type=1804 audit(1667996122.953:1311): pid=22181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1155/file1/bus" dev="loop4" ino=1048954 res=1 errno=0 12:15:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x5, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x5, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) [ 856.182238][ T26] audit: type=1804 audit(1667996122.953:1312): pid=22181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1155/file1/bus" dev="loop4" ino=1048954 res=1 errno=0 [ 856.316699][T22200] serio: Serial port pts0 12:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:15:30 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x2000, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:30 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0x1dcd, 0x5]) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0x1dcd, 0x5]) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:15:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12:15:30 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0x20, 0x200, 0xffff8000, 0x6, "82c1992d2e568b808d3e24caa06b97cd4c7cc3"}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:15:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 12:15:30 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:30 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0x1dcd, 0x5]) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 863.211974][T22218] serio: Serial port pts0 [ 863.218593][T22228] loop4: detected capacity change from 0 to 87 [ 863.271017][ T26] audit: type=1804 audit(1667996130.123:1313): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1156/file1/bus" dev="loop4" ino=1048955 res=1 errno=0 12:15:30 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:30 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x2200, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r6}}, './cgroup\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x64, 0x0, r4, 0x0, &(0x7f0000000000)="0a00164aaf5d1c1c18806b407b81678a6bc02193c7f0e3c78d31655e9cf8e1bada330874d0bb964dba86f71fe2440000000000000000", 0x36, 0x4000801, 0x1, {0x0, r5}}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 863.354115][ T26] audit: type=1804 audit(1667996130.123:1314): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1156/file1/bus" dev="loop4" ino=1048955 res=1 errno=0 [ 863.494486][T22244] loop4: detected capacity change from 0 to 87 [ 863.542364][ T26] audit: type=1804 audit(1667996130.393:1315): pid=22244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1157/file1/bus" dev="loop4" ino=1048956 res=1 errno=0 [ 863.579135][ T26] audit: type=1804 audit(1667996130.393:1316): pid=22244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1157/file1/bus" dev="loop4" ino=1048956 res=1 errno=0 [ 869.819789][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.826283][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 12:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async, rerun: 64) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:15:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 12:15:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async, rerun: 32) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0x20, 0x200, 0xffff8000, 0x6, "82c1992d2e568b808d3e24caa06b97cd4c7cc3"}) (async, rerun: 32) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) tkill(r2, 0x14) 12:15:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r6}}, './cgroup\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x64, 0x0, r4, 0x0, &(0x7f0000000000)="0a00164aaf5d1c1c18806b407b81678a6bc02193c7f0e3c78d31655e9cf8e1bada330874d0bb964dba86f71fe2440000000000000000", 0x36, 0x4000801, 0x1, {0x0, r5}}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:37 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:37 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8100, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:37 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 870.397901][T22260] loop4: detected capacity change from 0 to 87 12:15:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 12:15:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0x20, 0x200, 0xffff8000, 0x6, "82c1992d2e568b808d3e24caa06b97cd4c7cc3"}) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:15:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r6}}, './cgroup\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x64, 0x0, r4, 0x0, &(0x7f0000000000)="0a00164aaf5d1c1c18806b407b81678a6bc02193c7f0e3c78d31655e9cf8e1bada330874d0bb964dba86f71fe2440000000000000000", 0x36, 0x4000801, 0x1, {0x0, r5}}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r6}}, './cgroup\x00'}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x64, 0x0, r4, 0x0, &(0x7f0000000000)="0a00164aaf5d1c1c18806b407b81678a6bc02193c7f0e3c78d31655e9cf8e1bada330874d0bb964dba86f71fe2440000000000000000", 0x36, 0x4000801, 0x1, {0x0, r5}}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) [ 870.446029][ T26] audit: type=1804 audit(1667996137.293:1317): pid=22260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1158/file1/bus" dev="loop4" ino=1048957 res=1 errno=0 12:15:37 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x9800, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:37 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 870.586565][ T26] audit: type=1804 audit(1667996137.293:1318): pid=22260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1158/file1/bus" dev="loop4" ino=1048957 res=1 errno=0 [ 870.665320][T22282] loop4: detected capacity change from 0 to 87 [ 870.677318][T22286] serio: Serial port pts0 [ 870.711582][ T26] audit: type=1804 audit(1667996137.563:1319): pid=22282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1159/file1/bus" dev="loop4" ino=1048958 res=1 errno=0 [ 870.762242][ T26] audit: type=1804 audit(1667996137.563:1320): pid=22282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1159/file1/bus" dev="loop4" ino=1048958 res=1 errno=0 12:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:15:44 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000, 0x0) r0 = geteuid() open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 12:15:44 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:44 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x57c4, &(0x7f0000000000)={0x0, 0x12cc, 0x200, 0x3, 0x120}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000f4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) 12:15:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:15:44 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x40004, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:44 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x57c4, &(0x7f0000000000)={0x0, 0x12cc, 0x200, 0x3, 0x120}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000f4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) 12:15:44 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async, rerun: 64) read(r1, 0x0, 0x2006) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x9) (async, rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) [ 877.654055][T22303] loop4: detected capacity change from 0 to 87 [ 877.729628][ T26] audit: type=1804 audit(1667996144.583:1321): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1160/file1/bus" dev="loop4" ino=1048959 res=1 errno=0 12:15:44 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x57c4, &(0x7f0000000000)={0x0, 0x12cc, 0x200, 0x3, 0x120}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000f4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x57c4, &(0x7f0000000000)={0x0, 0x12cc, 0x200, 0x3, 0x120}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000f4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) (async) 12:15:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:15:44 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 877.812601][ T26] audit: type=1804 audit(1667996144.623:1322): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1160/file1/bus" dev="loop4" ino=1048959 res=1 errno=0 12:15:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:15:51 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xfffff, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:15:51 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) pipe2$watch_queue(0xfffffffffffffffc, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x0, "d521a60e61d1cc2bee222fb78d3b4ea419ec015d995da9aac694412614fe1179fbda76f9b3af10f3fa2cced69576c43538aa179e57095d2ee64be773ca78c3e3a8a0b37dbee78af615a5286410b6f65b02890d728de071972f3cc22ccda1e8bb71dfb1ce6866e8fe9944dcac2055f19a7fd8b118bb46fe59fdb89ed21535"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="228b305357cad09249037511", 0xc}, {&(0x7f0000000300)="46142d86c2a345add1bb55f7a0dae8123a9388c7d3089d6ea22b711aa41d65c19d9d50716c71c4f58eca12dfaadeb075072d457fcb98d33c820fe08dd89c026044e6ab4d6e6937cb072c68894b13b1bb2e799a269a4ac88956b0203b6ffff21c86b09b5c0c7dedf173d19ae779769ea0002c8f885abf756ade9028e249f0179f4001d604359e2ebb73e5e0879326c705155acdc05c4ca0cb9666a31d888df4374417ba428eb6c1af944b7ff98318ca09ec203b96a922bb8343c6d432d6a203ba5771709b7aeeacf81158b5386102031bfdd4f7b8649ac2467c81901e686e6c5c", 0xe0}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb8}, 0x0, 0x40000, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x2032, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x27, 0x0, r0}, 0x4) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)=0x0) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) tkill(r3, 0x13) 12:15:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:51 executing program 2: r0 = socket$netlink(0xa, 0x3, 0x15) getpeername$netlink(r0, 0x0, 0x0) 12:15:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x87200000}, 0x0) 12:15:51 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) pipe2$watch_queue(0xfffffffffffffffc, 0x80) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x0, "d521a60e61d1cc2bee222fb78d3b4ea419ec015d995da9aac694412614fe1179fbda76f9b3af10f3fa2cced69576c43538aa179e57095d2ee64be773ca78c3e3a8a0b37dbee78af615a5286410b6f65b02890d728de071972f3cc22ccda1e8bb71dfb1ce6866e8fe9944dcac2055f19a7fd8b118bb46fe59fdb89ed21535"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="228b305357cad09249037511", 0xc}, {&(0x7f0000000300)="46142d86c2a345add1bb55f7a0dae8123a9388c7d3089d6ea22b711aa41d65c19d9d50716c71c4f58eca12dfaadeb075072d457fcb98d33c820fe08dd89c026044e6ab4d6e6937cb072c68894b13b1bb2e799a269a4ac88956b0203b6ffff21c86b09b5c0c7dedf173d19ae779769ea0002c8f885abf756ade9028e249f0179f4001d604359e2ebb73e5e0879326c705155acdc05c4ca0cb9666a31d888df4374417ba428eb6c1af944b7ff98318ca09ec203b96a922bb8343c6d432d6a203ba5771709b7aeeacf81158b5386102031bfdd4f7b8649ac2467c81901e686e6c5c", 0xe0}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb8}, 0x0, 0x40000, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x2032, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x27, 0x0, r0}, 0x4) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 884.882290][T22334] loop4: detected capacity change from 0 to 87 [ 884.919213][T22343] serio: Serial port pts0 12:15:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000002c0)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) [ 884.967025][ T26] audit: type=1804 audit(1667996151.813:1323): pid=22334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1161/file1/bus" dev="loop4" ino=1048960 res=1 errno=0 12:15:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:15:51 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xfffffff, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 885.066336][ T26] audit: type=1804 audit(1667996151.853:1324): pid=22334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1161/file1/bus" dev="loop4" ino=1048960 res=1 errno=0 [ 885.176614][T22363] loop4: detected capacity change from 0 to 87 [ 885.230083][ T26] audit: type=1804 audit(1667996152.083:1325): pid=22363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1162/file1/bus" dev="loop4" ino=1048961 res=1 errno=0 [ 885.263872][ T26] audit: type=1804 audit(1667996152.083:1326): pid=22363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1162/file1/bus" dev="loop4" ino=1048961 res=1 errno=0 12:16:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) (async) 12:16:04 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x610a82, 0x0) 12:16:04 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:16:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) pipe2$watch_queue(0xfffffffffffffffc, 0x80) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x0, "d521a60e61d1cc2bee222fb78d3b4ea419ec015d995da9aac694412614fe1179fbda76f9b3af10f3fa2cced69576c43538aa179e57095d2ee64be773ca78c3e3a8a0b37dbee78af615a5286410b6f65b02890d728de071972f3cc22ccda1e8bb71dfb1ce6866e8fe9944dcac2055f19a7fd8b118bb46fe59fdb89ed21535"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="228b305357cad09249037511", 0xc}, {&(0x7f0000000300)="46142d86c2a345add1bb55f7a0dae8123a9388c7d3089d6ea22b711aa41d65c19d9d50716c71c4f58eca12dfaadeb075072d457fcb98d33c820fe08dd89c026044e6ab4d6e6937cb072c68894b13b1bb2e799a269a4ac88956b0203b6ffff21c86b09b5c0c7dedf173d19ae779769ea0002c8f885abf756ade9028e249f0179f4001d604359e2ebb73e5e0879326c705155acdc05c4ca0cb9666a31d888df4374417ba428eb6c1af944b7ff98318ca09ec203b96a922bb8343c6d432d6a203ba5771709b7aeeacf81158b5386102031bfdd4f7b8649ac2467c81901e686e6c5c", 0xe0}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb8}, 0x0, 0x40000, 0x1}, 0x0) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x2032, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x27, 0x0, r0}, 0x4) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:16:04 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)=0x0) r3 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) tkill(r3, 0x13) 12:16:04 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:16:04 executing program 2: socket$netlink(0xa, 0x3, 0x87) [ 897.399254][T22379] serio: Serial port pts0 [ 897.406217][T22383] loop4: detected capacity change from 0 to 87 12:16:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async, rerun: 64) read(r1, 0x0, 0x2006) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)=0x0) (async) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 32) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) (async, rerun: 32) tkill(r3, 0x13) 12:16:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x0) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x81) 12:16:04 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 897.490362][ T26] audit: type=1804 audit(1667996164.343:1327): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1163/file1/bus" dev="loop4" ino=1048962 res=1 errno=0 [ 897.595245][T22383] syz-executor.4: attempt to access beyond end of device [ 897.595245][T22383] loop4: rw=0, sector=62, nr_sectors = 168 limit=87 12:16:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) [ 897.629618][ T26] audit: type=1804 audit(1667996164.383:1328): pid=22389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1163/file1/bus" dev="loop4" ino=1048962 res=1 errno=0 [ 897.636855][T22396] serio: Serial port pts0 12:16:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="00955305cb5900e32cdc101ae866a3f4463e1c2e348530a9574133343bc668d17ad5ed161bd35b91a374e74adc3973ccf4ab39a7b9890294f26c094543a425ab4608b61e7c3992c146319185d2b2d973a999a03a93346fc15aa7d4e90b3023e830b2309f96fbc0edcd3f2ff224c06686fc8c63a4f7a37e0cd08676b8a938fc8c7bc0a892960c801cb14107004ce59073b8ac8fac60416ad40ee5d1f0d728a19a872181", 0xa3, 0x4, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:16:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000600)=[@increfs], 0x0, 0x0, 0x0}) 12:16:15 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x0) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x81) 12:16:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 12:16:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x6, "7f12ddc1517600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0801, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = syz_open_pts(r3, 0x212400) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0xf}, &(0x7f00000001c0)) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x14) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x12) 12:16:15 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x2, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:15 executing program 2: r0 = socket$netlink(0xa, 0x3, 0x16) connect$netlink(r0, &(0x7f0000000740)=@unspec, 0xc) 12:16:15 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x0) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x81) 12:16:15 executing program 3: r0 = socket$netlink(0xa, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) [ 908.787618][T22417] loop4: detected capacity change from 0 to 87 12:16:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x6, "7f12ddc1517600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0801, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = syz_open_pts(r3, 0x212400) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0xf}, &(0x7f00000001c0)) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000100)) r5 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x14) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x12) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x6, "7f12ddc1517600"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0801, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) syz_open_pts(r3, 0x212400) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) (async) read(r4, 0x0, 0x2006) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0xf}, &(0x7f00000001c0)) (async) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000100)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r5, 0x14) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x12) (async) 12:16:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 908.873954][ T26] audit: type=1804 audit(1667996175.723:1329): pid=22417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1164/file1/bus" dev="loop4" ino=1048963 res=1 errno=0 12:16:15 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getnetconf={0x4c, 0x52, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_PROXY_NEIGH={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80000000}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20040084) [ 908.996481][ T26] audit: type=1804 audit(1667996175.723:1330): pid=22417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1164/file1/bus" dev="loop4" ino=1048963 res=1 errno=0 [ 909.051947][T22441] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 12:16:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="00955305cb5900e32cdc101ae866a3f4463e1c2e348530a9574133343bc668d17ad5ed161bd35b91a374e74adc3973ccf4ab39a7b9890294f26c094543a425ab4608b61e7c3992c146319185d2b2d973a999a03a93346fc15aa7d4e90b3023e830b2309f96fbc0edcd3f2ff224c06686fc8c63a4f7a37e0cd08676b8a938fc8c7bc0a892960c801cb14107004ce59073b8ac8fac60416ad40ee5d1f0d728a19a872181", 0xa3, 0x4, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:16:21 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x3, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 12:16:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x6, "7f12ddc1517600"}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0801, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) (async) r4 = syz_open_pts(r3, 0x212400) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) (async) read(r4, 0x0, 0x2006) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0xf}, &(0x7f00000001c0)) (async) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000100)) (async) r5 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x14) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x12) 12:16:21 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) 12:16:21 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r6, r7, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r11, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r9, r10, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r11, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r12, &(0x7f0000000240)={0x2000000e}, r5, 0x3, 0x0, 0x1, {0x0, r13}}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000200)=@can, 0x0, 0x80800, 0x0, {0x0, r13}}, 0xffffffd6) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:16:21 executing program 2: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) 12:16:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) [ 915.067816][T22476] loop4: detected capacity change from 0 to 87 12:16:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x20000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:16:22 executing program 3: socketpair(0x6, 0x0, 0x0, 0x0) 12:16:22 executing program 2: socketpair(0x26, 0x5, 0x6, 0x0) [ 915.153423][ T26] audit: type=1804 audit(1667996182.003:1331): pid=22476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1165/file1/bus" dev="loop4" ino=1048964 res=1 errno=0 12:16:22 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r11 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r11, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r9, r10, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r11, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r12, &(0x7f0000000240)={0x2000000e}, r5, 0x3, 0x0, 0x1, {0x0, r13}}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000200)=@can, 0x0, 0x80800, 0x0, {0x0, r13}}, 0xffffffd6) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 915.267502][ T26] audit: type=1804 audit(1667996182.033:1332): pid=22476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1165/file1/bus" dev="loop4" ino=1048964 res=1 errno=0 [ 915.297534][T22489] serio: Serial port pts0 12:16:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) sendto$inet(r1, &(0x7f0000000200)="00955305cb5900e32cdc101ae866a3f4463e1c2e348530a9574133343bc668d17ad5ed161bd35b91a374e74adc3973ccf4ab39a7b9890294f26c094543a425ab4608b61e7c3992c146319185d2b2d973a999a03a93346fc15aa7d4e90b3023e830b2309f96fbc0edcd3f2ff224c06686fc8c63a4f7a37e0cd08676b8a938fc8c7bc0a892960c801cb14107004ce59073b8ac8fac60416ad40ee5d1f0d728a19a872181", 0xa3, 0x4, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:16:29 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x4, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:29 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x24, &(0x7f0000000040), &(0x7f0000000140)=0x98) 12:16:29 executing program 3: clock_gettime(0x0, &(0x7f0000000140)={0x0}) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000180)={r0}, 0x0) 12:16:29 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r6, r7, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r11, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r9, r10, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r11, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r12, &(0x7f0000000240)={0x2000000e}, r5, 0x3, 0x0, 0x1, {0x0, r13}}, 0xffffffff) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000200)=@can, 0x0, 0x80800, 0x0, {0x0, r13}}, 0xffffffd6) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:16:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x20000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) [ 922.287522][T22508] loop4: detected capacity change from 0 to 87 12:16:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1, 0x4) 12:16:29 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 922.399905][ T26] audit: type=1804 audit(1667996189.253:1333): pid=22508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1166/file1/bus" dev="loop4" ino=1048965 res=1 errno=0 12:16:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 12:16:29 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000340)) [ 922.457250][ T26] audit: type=1804 audit(1667996189.283:1334): pid=22508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1166/file1/bus" dev="loop4" ino=1048965 res=1 errno=0 12:16:29 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x5, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r0) [ 922.675732][T22535] loop4: detected capacity change from 0 to 87 [ 922.717274][ T26] audit: type=1804 audit(1667996189.563:1335): pid=22535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1167/file1/bus" dev="loop4" ino=1048966 res=1 errno=0 [ 922.754620][ T26] audit: type=1804 audit(1667996189.563:1336): pid=22535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1167/file1/bus" dev="loop4" ino=1048966 res=1 errno=0 12:16:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r1 = syz_io_uring_complete(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:16:37 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:16:37 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 12:16:37 executing program 2: socketpair(0x22, 0x3, 0x0, 0x0) 12:16:37 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x6, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x20000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x20000) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:16:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="64e435e7456a7d154e0c916bc5f8852b", 0x10) 12:16:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) [ 930.670017][T22546] loop4: detected capacity change from 0 to 87 [ 930.685411][T22549] serio: Serial port pts0 12:16:37 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 930.725786][ T26] audit: type=1804 audit(1667996197.573:1337): pid=22546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1168/file1/bus" dev="loop4" ino=1048967 res=1 errno=0 12:16:37 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 12:16:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002c80)={&(0x7f0000002b80), 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 12:16:37 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x7, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 930.826265][ T26] audit: type=1804 audit(1667996197.613:1338): pid=22546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1168/file1/bus" dev="loop4" ino=1048967 res=1 errno=0 [ 930.977625][T22570] loop4: detected capacity change from 0 to 87 [ 931.008058][ T26] audit: type=1804 audit(1667996197.853:1339): pid=22570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1169/file1/bus" dev="loop4" ino=1048968 res=1 errno=0 [ 931.057366][ T26] audit: type=1804 audit(1667996197.903:1340): pid=22570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1169/file1/bus" dev="loop4" ino=1048968 res=1 errno=0 [ 931.259508][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.265919][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 12:16:45 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0x0, 0x602040) r2 = syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0xd1f6, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_setup(0x4294, &(0x7f0000000040)={0x0, 0x5b18, 0x4, 0x1, 0x314}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0x774, {0x0, r6}, 0x6, 0x2, 0x1, {0x0, 0x0, r8}}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000000)=0xe92c) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:16:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x600000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:16:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x19) 12:16:45 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}}}}]}}, 0x0) 12:16:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r1 = syz_io_uring_complete(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (rerun: 32) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:16:45 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x8, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 939.162354][T22584] loop4: detected capacity change from 0 to 87 12:16:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x600000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x600000) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:16:46 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0x0, 0x602040) r2 = syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0xd1f6, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) (async) syz_io_uring_setup(0x4294, &(0x7f0000000040)={0x0, 0x5b18, 0x4, 0x1, 0x314}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0x774, {0x0, r6}, 0x6, 0x2, 0x1, {0x0, 0x0, r8}}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000000)=0xe92c) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 939.235215][ T26] audit: type=1804 audit(1667996206.083:1341): pid=22584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1170/file1/bus" dev="loop4" ino=1048969 res=1 errno=0 12:16:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x600000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) tkill(r2, 0x14) 12:16:46 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x30200, 0x0) [ 939.309526][ T26] audit: type=1804 audit(1667996206.083:1342): pid=22584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1170/file1/bus" dev="loop4" ino=1048969 res=1 errno=0 12:16:46 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x9, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:46 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0x0, 0x602040) r2 = syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0xd1f6, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) syz_io_uring_setup(0x4294, &(0x7f0000000040)={0x0, 0x5b18, 0x4, 0x1, 0x314}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0xfffffffffffffffc, 0x12) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0x774, {0x0, r6}, 0x6, 0x2, 0x1, {0x0, 0x0, r8}}, 0x20) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000000)=0xe92c) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 939.408422][ T3693] usb 3-1: new full-speed USB device number 22 using dummy_hcd 12:16:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8917, 0x0) 12:16:46 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r0, 0x410001) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x13, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000280), 0x4800) tkill(r4, 0x14) 12:16:46 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000240)=@string={0x2}}]}) [ 939.529026][T22618] loop4: detected capacity change from 0 to 87 [ 939.637220][ T26] audit: type=1804 audit(1667996206.483:1343): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1171/file1/bus" dev="loop4" ino=1048970 res=1 errno=0 [ 939.696725][T22624] serio: Serial port pts0 [ 939.707125][ T26] audit: type=1804 audit(1667996206.523:1344): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1171/file1/bus" dev="loop4" ino=1048970 res=1 errno=0 [ 939.788639][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 939.806978][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 939.819170][ T3693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.829842][ T3693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 939.908554][ T6] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 939.998580][ T3693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.007638][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.020535][ T3693] usb 3-1: Product: syz [ 940.024732][ T3693] usb 3-1: Manufacturer: syz [ 940.032171][ T3693] usb 3-1: SerialNumber: syz [ 940.058738][T22581] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 940.269479][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 940.280651][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 940.318792][ T3693] cdc_ncm 3-1:1.0: bind() failure [ 940.326502][ T3693] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 940.333861][ T3693] cdc_ncm 3-1:1.1: bind() failure [ 940.342029][ T3693] usb 3-1: USB disconnect, device number 22 [ 940.458659][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.467743][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.476110][ T6] usb 4-1: Product: syz [ 940.480698][ T6] usb 4-1: SerialNumber: syz [ 940.508858][T22623] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 12:16:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x81) [ 940.768577][ T6] cdc_ncm 4-1:1.0: bind() failure [ 940.777335][ T6] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 940.784234][ T6] cdc_ncm 4-1:1.1: bind() failure [ 940.792807][ T6] usb 4-1: USB disconnect, device number 22 12:16:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) r1 = syz_io_uring_complete(0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) syz_io_uring_complete(0x0) (async) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:16:57 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x155d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:16:57 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xa, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:16:57 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r0, 0x410001) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x13, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TIOCCONS(r3, 0x541d) (async) r4 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) pipe2(&(0x7f0000000280), 0x4800) tkill(r4, 0x14) 12:16:57 executing program 2: syz_emit_ethernet(0xd6, &(0x7f0000000180)={@remote, @link_local, @val={@void, {0x8035}}, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x0, 0x6, "231393", 0x9c, 0x11, 0x0, @private0, @remote, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d4485e18c6d13455684b7ffdb5df41ead58a9321d84ab005c49a05244b3b7220", "a774a3016c5b9fded2e3964a5c4155df7def20c67accdfdf15ccf72ec54b9f850bc719c911568bc6be62e9771a21b2b8", "73f9b4baf02741e967b8e8d402022ee19d89d8740fc31133576b0805", {"046eb684eab56a36a51636c6f350de6f", "c558df8b6ab98bed3fdd2331689fd29d"}}}}}}}}}, 0x0) 12:16:57 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 12:16:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x4}, {}]}}) 12:16:57 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x155d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 950.570653][T22645] loop4: detected capacity change from 0 to 87 [ 950.608653][T22647] serio: Serial port pts0 12:16:57 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r0, 0x410001) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x13, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$TIOCCONS(r3, 0x541d) (async) r4 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) pipe2(&(0x7f0000000280), 0x4800) tkill(r4, 0x14) [ 950.628217][ T26] audit: type=1804 audit(1667996217.473:1345): pid=22645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1172/file1/bus" dev="loop4" ino=1048971 res=1 errno=0 12:16:57 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x155d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:16:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) [ 950.702917][ T26] audit: type=1804 audit(1667996217.513:1346): pid=22645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1172/file1/bus" dev="loop4" ino=1048971 res=1 errno=0 12:16:57 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xc, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 950.818467][ T21] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 950.918171][T22667] loop4: detected capacity change from 0 to 87 [ 950.923362][T22644] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 950.975434][ T26] audit: type=1804 audit(1667996217.823:1347): pid=22667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1173/file1/bus" dev="loop4" ino=1048972 res=1 errno=0 [ 951.005020][ T26] audit: type=1804 audit(1667996217.833:1348): pid=22667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1173/file1/bus" dev="loop4" ino=1048972 res=1 errno=0 [ 951.058366][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 951.179085][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 951.348452][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.357524][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.370125][ T21] usb 4-1: Product: syz [ 951.374293][ T21] usb 4-1: SerialNumber: syz [ 951.429618][ T21] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 951.633885][ T21] usb 4-1: USB disconnect, device number 23 12:17:05 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xb37c]}, 0x8, 0x800) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x7, @raw_data="4c8f48a7670c33e3ee8e7611cbe2bf86cb94c9c5f3e1b17bf20154badb9b98d6fe0a15cfeb56801f7c6b83ffaae6c7e2fb498a9e3c320ca06c5584d14b9671465ed32d3297e190af9dfe0e2327f4745aa003dc04ef984cdba50e9f7cb88ee6b863ecbdf09dca3c597c92e44d8bc598403fc9b9e40765315dee7f042870736aee2b4189653df635298e72b753bb58364b242cf0308d216050ebe4ac0447944515840a39218b98fd8730d4d31f2e9a8b7969b49ac2f042f16948d692356572071d3284319a57872ee6"}) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:17:05 executing program 2: select(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x4}, &(0x7f0000000080)={0x2, 0x3f, 0x3}, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000100)={0x77359400}) 12:17:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:17:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x76ae, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x7fffffffffffffff, 0x2002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x48) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x3ff, 0x7f, 0x3, 0x0, 0x0, [{{r4}, 0x6}, {{r5}, 0x9}, {{r6}, 0xffffffff}]}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:17:05 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xd, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:05 executing program 3: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "56ac63", 0x18, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x5}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@fragment], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "82eac0", 0x0, '#MI'}}}}}}}, 0x0) 12:17:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1e) 12:17:05 executing program 3: socketpair(0x10, 0x0, 0x8, &(0x7f0000000080)) 12:17:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x76ae, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x7fffffffffffffff, 0x2002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x48) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x3ff, 0x7f, 0x3, 0x0, 0x0, [{{r4}, 0x6}, {{r5}, 0x9}, {{r6}, 0xffffffff}]}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x76ae, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x7fffffffffffffff, 0x2002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x48) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x3ff, 0x7f, 0x3, 0x0, 0x0, [{{r4}, 0x6}, {{r5}, 0x9}, {{r6}, 0xffffffff}]}) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) [ 958.924687][T22682] loop4: detected capacity change from 0 to 87 [ 958.934517][ T26] audit: type=1400 audit(1667996225.783:1349): avc: denied { create } for pid=22674 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 12:17:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) [ 959.022777][ T26] audit: type=1400 audit(1667996225.873:1350): avc: denied { create } for pid=22684 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 959.114278][ T26] audit: type=1804 audit(1667996225.893:1351): pid=22687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1174/file1/bus" dev="sda1" ino=1168 res=1 errno=0 12:17:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}}) 12:17:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x76ae, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x7fffffffffffffff, 0x2002) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x48) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x3ff, 0x7f, 0x3, 0x0, 0x0, [{{r4}, 0x6}, {{r5}, 0x9}, {{r6}, 0xffffffff}]}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 959.277137][ T26] audit: type=1804 audit(1667996225.893:1352): pid=22687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1174/file1/bus" dev="sda1" ino=1168 res=1 errno=0 12:17:14 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xb37c]}, 0x8, 0x800) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x7, @raw_data="4c8f48a7670c33e3ee8e7611cbe2bf86cb94c9c5f3e1b17bf20154badb9b98d6fe0a15cfeb56801f7c6b83ffaae6c7e2fb498a9e3c320ca06c5584d14b9671465ed32d3297e190af9dfe0e2327f4745aa003dc04ef984cdba50e9f7cb88ee6b863ecbdf09dca3c597c92e44d8bc598403fc9b9e40765315dee7f042870736aee2b4189653df635298e72b753bb58364b242cf0308d216050ebe4ac0447944515840a39218b98fd8730d4d31f2e9a8b7969b49ac2f042f16948d692356572071d3284319a57872ee6"}) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:17:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:17:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8937, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) 12:17:14 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x9, &(0x7f00000001c0)=@string={0x9, 0x3, "61eb41cbe67148"}}, {0xe, &(0x7f00000002c0)=@string={0xe, 0x3, "5f5a6962aea26d352eefbc1c"}}, {0x0, 0x0}]}) 12:17:14 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8fe6ffff722e66617400020101000240008080f805", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, 0x0, &(0x7f0000000300)=[{}]) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x7f, 0xffffffff, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x400) sendfile(r4, r5, 0x0, 0x20000000d67) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000001c0)=0x867) ftruncate(r0, 0x7) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xb1}, 0xb) 12:17:14 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xf, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 967.454409][T22718] loop4: detected capacity change from 0 to 87 [ 967.486381][ T26] audit: type=1400 audit(1667996234.333:1353): avc: denied { getopt } for pid=22714 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 12:17:14 executing program 2: syz_emit_ethernet(0x19, &(0x7f0000002180)={@remote, @multicast, @val, {@llc={0x4, {@llc={0x0, 0x0, '^'}}}}}, 0x0) 12:17:14 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8fe6ffff722e66617400020101000240008080f805", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, 0x0, &(0x7f0000000300)=[{}]) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x7f, 0xffffffff, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x400) sendfile(r4, r5, 0x0, 0x20000000d67) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000001c0)=0x867) ftruncate(r0, 0x7) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xb1}, 0xb) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8fe6ffff722e66617400020101000240008080f805", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r2, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$peeksig(0x4209, r3, 0x0, &(0x7f0000000300)=[{}]) (async) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x7f, 0xffffffff, r3}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x400) (async) sendfile(r4, r5, 0x0, 0x20000000d67) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000001c0)=0x867) (async) ftruncate(r0, 0x7) (async) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xb1}, 0xb) (async) [ 967.590740][ T26] audit: type=1804 audit(1667996234.393:1354): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1175/file1/bus" dev="loop4" ino=1048973 res=1 errno=0 12:17:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async, rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:17:14 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, 0x0, 0x0) 12:17:14 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x10, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 967.664937][ T26] audit: type=1400 audit(1667996234.393:1355): avc: denied { lock } for pid=22714 comm="syz-executor.0" path="socket:[91336]" dev="sockfs" ino=91336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 967.768495][ T21] usb 4-1: new high-speed USB device number 24 using dummy_hcd 12:17:14 executing program 2: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000f840)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000024c0)={0x100200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002480)=[0x0], 0x1}, 0x58) [ 967.810003][ T26] audit: type=1804 audit(1667996234.393:1356): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1175/file1/bus" dev="loop4" ino=1048973 res=1 errno=0 [ 967.867635][T22760] loop4: detected capacity change from 0 to 87 [ 967.918464][ T26] audit: type=1804 audit(1667996234.763:1357): pid=22760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1176/file1/bus" dev="loop4" ino=1048974 res=1 errno=0 [ 967.999742][ T26] audit: type=1804 audit(1667996234.803:1358): pid=22760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1176/file1/bus" dev="loop4" ino=1048974 res=1 errno=0 [ 968.098489][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 968.220149][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 968.588505][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 968.597593][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.605974][ T21] usb 4-1: Manufacturer: 婟扩ꊮ㕭᲼ [ 968.612708][ T21] usb 4-1: SerialNumber: syz [ 968.875440][ T13] usb 4-1: USB disconnect, device number 24 12:17:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:17:22 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xb37c]}, 0x8, 0x800) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x7, @raw_data="4c8f48a7670c33e3ee8e7611cbe2bf86cb94c9c5f3e1b17bf20154badb9b98d6fe0a15cfeb56801f7c6b83ffaae6c7e2fb498a9e3c320ca06c5584d14b9671465ed32d3297e190af9dfe0e2327f4745aa003dc04ef984cdba50e9f7cb88ee6b863ecbdf09dca3c597c92e44d8bc598403fc9b9e40765315dee7f042870736aee2b4189653df635298e72b753bb58364b242cf0308d216050ebe4ac0447944515840a39218b98fd8730d4d31f2e9a8b7969b49ac2f042f16948d692356572071d3284319a57872ee6"}) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xb37c]}, 0x8, 0x800) (async) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x7, @raw_data="4c8f48a7670c33e3ee8e7611cbe2bf86cb94c9c5f3e1b17bf20154badb9b98d6fe0a15cfeb56801f7c6b83ffaae6c7e2fb498a9e3c320ca06c5584d14b9671465ed32d3297e190af9dfe0e2327f4745aa003dc04ef984cdba50e9f7cb88ee6b863ecbdf09dca3c597c92e44d8bc598403fc9b9e40765315dee7f042870736aee2b4189653df635298e72b753bb58364b242cf0308d216050ebe4ac0447944515840a39218b98fd8730d4d31f2e9a8b7969b49ac2f042f16948d692356572071d3284319a57872ee6"}) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r1, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:17:22 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8fe6ffff722e66617400020101000240008080f805", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, 0x0, &(0x7f0000000300)=[{}]) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x7f, 0xffffffff, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x400) sendfile(r4, r5, 0x0, 0x20000000d67) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000001c0)=0x867) ftruncate(r0, 0x7) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xb1}, 0xb) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8fe6ffff722e66617400020101000240008080f805", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r2, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$peeksig(0x4209, r3, 0x0, &(0x7f0000000300)=[{}]) (async) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x7f, 0xffffffff, r3}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x400) (async) sendfile(r4, r5, 0x0, 0x20000000d67) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000001c0)=0x867) (async) ftruncate(r0, 0x7) (async) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xb1}, 0xb) (async) 12:17:22 executing program 2: getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) 12:17:22 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x11, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:22 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000021c0)=@framed={{}, [@generic]}, &(0x7f0000002200)='syzkaller\x00', 0x7fff, 0xf4, &(0x7f0000002240)=""/244, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380), 0x10}, 0x80) 12:17:22 executing program 2: bpf$ITER_CREATE(0xa, 0x0, 0x0) 12:17:22 executing program 3: syz_clone3(&(0x7f0000000200)={0x10080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 975.885286][T22777] loop4: detected capacity change from 0 to 87 [ 975.889387][T22776] serio: Serial port pts0 [ 975.975352][ T26] audit: type=1804 audit(1667996242.823:1359): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1177/file1/bus" dev="loop4" ino=1048975 res=1 errno=0 12:17:22 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x80000001}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 12:17:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{}, 0x17, 0x81, 0x8d1a}, {{0x77359400}, 0x15, 0x800, 0x2}, {{}, 0x1, 0x22a0, 0x80000001}, {{r5, r6/1000+10000}, 0x1f, 0xff7f, 0xd8}, {{0x0, 0xea60}, 0x3, 0x1, 0x200}, {{r7, r8/1000+10000}, 0x17, 0x0, 0xfffffc00}, {{0x77359400}, 0x1f, 0x6f8, 0x1000}, {{0x77359400}, 0x4, 0x1200, 0x4f}], 0xc0) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_LINKAT={0x27, 0x42, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="062254c3f5a997b2b3eed191c73c4cf9c131a8b9dce5cba317f3012932dc3c1d819dd4780e7644f940dc9819058ceffe43ce2e4c82778b229c94950a1afe08466f9d20ab7f7c103854591b5ce4cf364a0269bf861862716556c61f2b4b5b48d15d10bff01e646cf300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bc0000007e0002002e589700c20d3d76"]) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, 0xffffffffffffffff, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x28, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r14}}, 0x5) sched_rr_get_interval(r4, &(0x7f0000000040)) 12:17:22 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x15, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:22 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540), 0x14) [ 976.095830][ T26] audit: type=1804 audit(1667996242.823:1360): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1177/file1/bus" dev="loop4" ino=1048975 res=1 errno=0 [ 976.249215][T22802] loop4: detected capacity change from 0 to 87 [ 976.277532][ T26] audit: type=1804 audit(1667996243.123:1361): pid=22802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1178/file1/bus" dev="loop4" ino=1048976 res=1 errno=0 [ 976.334933][ T26] audit: type=1804 audit(1667996243.133:1362): pid=22802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1178/file1/bus" dev="loop4" ino=1048976 res=1 errno=0 12:17:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{}, 0x17, 0x81, 0x8d1a}, {{0x77359400}, 0x15, 0x800, 0x2}, {{}, 0x1, 0x22a0, 0x80000001}, {{r5, r6/1000+10000}, 0x1f, 0xff7f, 0xd8}, {{0x0, 0xea60}, 0x3, 0x1, 0x200}, {{r7, r8/1000+10000}, 0x17, 0x0, 0xfffffc00}, {{0x77359400}, 0x1f, 0x6f8, 0x1000}, {{0x77359400}, 0x4, 0x1200, 0x4f}], 0xc0) (async, rerun: 64) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_LINKAT={0x27, 0x42, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="062254c3f5a997b2b3eed191c73c4cf9c131a8b9dce5cba317f3012932dc3c1d819dd4780e7644f940dc9819058ceffe43ce2e4c82778b229c94950a1afe08466f9d20ab7f7c103854591b5ce4cf364a0269bf861862716556c61f2b4b5b48d15d10bff01e646cf300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bc0000007e0002002e589700c20d3d76"]) (rerun: 64) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, 0xffffffffffffffff, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) (async, rerun: 64) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x28, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r14}}, 0x5) (rerun: 64) sched_rr_get_interval(r4, &(0x7f0000000040)) 12:17:31 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1301000009000408fc0592d20700006a3b010902"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12:17:31 executing program 2: syz_clone(0x905a500, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:17:31 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x16, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000)="ed57271139afce27fda844065bcd2ef172d1e9372ba825834373905cb917d92bd8261087dfd38d13eda97daf86ba34b6fd4a1decdc1d6eac15ca7f1474867bf03e5748fbed80254a548e0d8f94", &(0x7f0000000100)=@tcp6, 0x1}, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 12:17:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000300)=[{{}, 0x17, 0x81, 0x8d1a}, {{0x77359400}, 0x15, 0x800, 0x2}, {{}, 0x1, 0x22a0, 0x80000001}, {{r5, r6/1000+10000}, 0x1f, 0xff7f, 0xd8}, {{0x0, 0xea60}, 0x3, 0x1, 0x200}, {{r7, r8/1000+10000}, 0x17, 0x0, 0xfffffc00}, {{0x77359400}, 0x1f, 0x6f8, 0x1000}, {{0x77359400}, 0x4, 0x1200, 0x4f}], 0xc0) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_LINKAT={0x27, 0x42, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="062254c3f5a997b2b3eed191c73c4cf9c131a8b9dce5cba317f3012932dc3c1d819dd4780e7644f940dc9819058ceffe43ce2e4c82778b229c94950a1afe08466f9d20ab7f7c103854591b5ce4cf364a0269bf861862716556c61f2b4b5b48d15d10bff01e646cf300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bc0000007e0002002e589700c20d3d76"]) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, 0xffffffffffffffff, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x28, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r14}}, 0x5) sched_rr_get_interval(r4, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) write$evdev(r0, &(0x7f0000000300)=[{{}, 0x17, 0x81, 0x8d1a}, {{0x77359400}, 0x15, 0x800, 0x2}, {{}, 0x1, 0x22a0, 0x80000001}, {{r5, r6/1000+10000}, 0x1f, 0xff7f, 0xd8}, {{0x0, 0xea60}, 0x3, 0x1, 0x200}, {{r7, r8/1000+10000}, 0x17, 0x0, 0xfffffc00}, {{0x77359400}, 0x1f, 0x6f8, 0x1000}, {{0x77359400}, 0x4, 0x1200, 0x4f}], 0xc0) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_LINKAT={0x27, 0x42, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)=ANY=[@ANYBLOB="062254c3f5a997b2b3eed191c73c4cf9c131a8b9dce5cba317f3012932dc3c1d819dd4780e7644f940dc9819058ceffe43ce2e4c82778b229c94950a1afe08466f9d20ab7f7c103854591b5ce4cf364a0269bf861862716556c61f2b4b5b48d15d10bff01e646cf300", @ANYRES32, @ANYBLOB="bc0000007e0002002e589700c20d3d76"]) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, 0xffffffffffffffff, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x28, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r14}}, 0x5) (async) sched_rr_get_interval(r4, &(0x7f0000000040)) (async) 12:17:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) [ 984.255063][T22821] loop4: detected capacity change from 0 to 87 [ 984.282823][T22822] serio: Serial port pts0 12:17:31 executing program 0: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gre0\x00', 0x2}, 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) 12:17:31 executing program 2: pipe2(&(0x7f0000000040), 0x0) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) [ 984.334021][ T26] audit: type=1804 audit(1667996251.183:1363): pid=22821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1179/file1/bus" dev="loop4" ino=1048977 res=1 errno=0 12:17:31 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x48, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:31 executing program 0: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gre0\x00', 0x2}, 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) 12:17:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) (async) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) [ 984.429990][ T26] audit: type=1804 audit(1667996251.213:1364): pid=22821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1179/file1/bus" dev="loop4" ino=1048977 res=1 errno=0 [ 984.528526][ T3693] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 984.560039][T22845] serio: Serial port pts0 [ 984.570892][T22850] loop4: detected capacity change from 0 to 87 [ 984.583020][T22809] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 984.621331][ T26] audit: type=1804 audit(1667996251.473:1365): pid=22850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1180/file1/bus" dev="loop4" ino=1048978 res=1 errno=0 [ 984.657164][ T26] audit: type=1804 audit(1667996251.473:1366): pid=22850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1180/file1/bus" dev="loop4" ino=1048978 res=1 errno=0 [ 984.768362][ T3693] usb 4-1: Using ep0 maxpacket: 8 [ 984.890520][ T3693] usb 4-1: config 0 has no interfaces? [ 985.008557][ T3693] usb 4-1: New USB device found, idVendor=05fc, idProduct=d292, bcdDevice= 0.07 [ 985.017929][ T3693] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 985.026972][ T3693] usb 4-1: Product: syz [ 985.031340][ T3693] usb 4-1: SerialNumber: syz [ 985.047134][ T3693] usb 4-1: config 0 descriptor?? [ 985.500843][ T6] usb 4-1: USB disconnect, device number 25 12:17:32 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000001940)=@bloom_filter, 0x48) 12:17:32 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x43b401, 0x0) 12:17:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x1dc7cf07efd2d0dc, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:17:32 executing program 0: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gre0\x00', 0x2}, 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gre0\x00', 0x2}, 0x18) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) [ 986.053900][T22856] serio: Serial port pts0 [ 992.699542][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.705885][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 12:17:43 executing program 2: syz_clone3(&(0x7f0000000400)={0x160141000, &(0x7f0000000180), &(0x7f00000001c0), 0x0, {0x11}, &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000340)=""/122, 0x0}, 0x58) getuid() 12:17:43 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x4c, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000c00)={0xa, 0x0, 0x0, @private2}, 0x1c) 12:17:43 executing program 0: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007000700ff07000458ea"], &(0x7f0000000040)=0xe) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000380)=[{{r1, r2/1000+60000}, 0x3, 0x2, 0x7f}, {{}, 0x5, 0x1f, 0x20}], 0x30) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000080)=0x80, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000400)={0x2, 0x3e, &(0x7f00000003c0)="0c9aeb034cb3e4ac89255f3721a22b61b33ac032ba40fd0946d6654442017cac3986a582e07a4f5a3aeb48fc2a03faee1f20c60f9777823dd3ac94e20843"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f6000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r13, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r11, r12, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r13, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x58, 0x0, r3, &(0x7f0000000440)}, 0x0) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:17:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (rerun: 64) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000)="ed57271139afce27fda844065bcd2ef172d1e9372ba825834373905cb917d92bd8261087dfd38d13eda97daf86ba34b6fd4a1decdc1d6eac15ca7f1474867bf03e5748fbed80254a548e0d8f94", &(0x7f0000000100)=@tcp6, 0x1}, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 12:17:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x1dc7cf07efd2d0dc, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:17:43 executing program 3: syz_clone3(&(0x7f0000000180)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 996.912997][T22882] loop4: detected capacity change from 0 to 87 12:17:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async, rerun: 64) r1 = syz_open_pts(r0, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x1dc7cf07efd2d0dc, &(0x7f0000000040)={0x0, 0x14}, &(0x7f00000001c0)) (async) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) tkill(r2, 0x14) (rerun: 32) [ 997.003229][ T26] audit: type=1804 audit(1667996263.853:1367): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1181/file1/bus" dev="loop4" ino=1048979 res=1 errno=0 [ 997.063052][ T26] audit: type=1804 audit(1667996263.893:1368): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1181/file1/bus" dev="loop4" ino=1048979 res=1 errno=0 12:17:44 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x57, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x7, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 12:17:44 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f0000000300), 0xc) 12:17:44 executing program 2: syz_clone3(&(0x7f0000000400)={0x160141000, &(0x7f0000000180), &(0x7f00000001c0), 0x0, {0x11}, &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000340)=""/122, 0x0}, 0x58) getuid() 12:17:44 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000880), &(0x7f00000008c0)=0x8) [ 997.337662][T22912] loop4: detected capacity change from 0 to 87 [ 997.393683][T22911] serio: Serial port pts0 [ 997.464601][ T26] audit: type=1804 audit(1667996264.313:1369): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1182/file1/bus" dev="loop4" ino=1048980 res=1 errno=0 12:17:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x7, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x7, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:17:44 executing program 0: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007000700ff07000458ea"], &(0x7f0000000040)=0xe) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) (rerun: 32) write$evdev(r0, &(0x7f0000000380)=[{{r1, r2/1000+60000}, 0x3, 0x2, 0x7f}, {{}, 0x5, 0x1f, 0x20}], 0x30) (async) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000080)=0x80, 0x0) (async, rerun: 64) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000400)={0x2, 0x3e, &(0x7f00000003c0)="0c9aeb034cb3e4ac89255f3721a22b61b33ac032ba40fd0946d6654442017cac3986a582e07a4f5a3aeb48fc2a03faee1f20c60f9777823dd3ac94e20843"}) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f6000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r13 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r13, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r11, r12, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r13, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x58, 0x0, r3, &(0x7f0000000440)}, 0x0) (async) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 997.545943][ T26] audit: type=1804 audit(1667996264.353:1370): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1182/file1/bus" dev="loop4" ino=1048980 res=1 errno=0 12:17:44 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x58, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 997.643952][T22923] serio: Serial port pts0 [ 997.782378][T22934] loop4: detected capacity change from 0 to 87 [ 997.785528][T22906] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 997.817655][T22906] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.865166][T22906] Buffer I/O error on dev loop4, logical block 0, async page read [ 997.885397][ T26] audit: type=1804 audit(1667996264.733:1371): pid=22936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1183/file1/bus" dev="sda1" ino=1160 res=1 errno=0 [ 998.008336][ T26] audit: type=1804 audit(1667996264.773:1372): pid=22936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1183/file1/bus" dev="sda1" ino=1160 res=1 errno=0 12:17:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000)="ed57271139afce27fda844065bcd2ef172d1e9372ba825834373905cb917d92bd8261087dfd38d13eda97daf86ba34b6fd4a1decdc1d6eac15ca7f1474867bf03e5748fbed80254a548e0d8f94", &(0x7f0000000100)=@tcp6, 0x1}, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 12:17:50 executing program 3: socketpair(0x0, 0x0, 0x9, 0x0) 12:17:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x7, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) tkill(r2, 0x14) (rerun: 32) 12:17:50 executing program 2: syz_clone3(&(0x7f0000000400)={0x160141000, &(0x7f0000000180), &(0x7f00000001c0), 0x0, {0x11}, &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000340)=""/122, 0x0}, 0x58) getuid() 12:17:50 executing program 0: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007000700ff07000458ea"], &(0x7f0000000040)=0xe) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000380)=[{{r1, r2/1000+60000}, 0x3, 0x2, 0x7f}, {{}, 0x5, 0x1f, 0x20}], 0x30) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000080)=0x80, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000400)={0x2, 0x3e, &(0x7f00000003c0)="0c9aeb034cb3e4ac89255f3721a22b61b33ac032ba40fd0946d6654442017cac3986a582e07a4f5a3aeb48fc2a03faee1f20c60f9777823dd3ac94e20843"}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f6000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r13 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r13, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r11, r12, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r13, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x58, 0x0, r3, &(0x7f0000000440)}, 0x0) (async, rerun: 64) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 12:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x60, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:50 executing program 3: socket(0x18, 0x3, 0x0) [ 1003.361958][T22946] loop4: detected capacity change from 0 to 87 [ 1003.388374][T22953] serio: Serial port pts0 12:17:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 12:17:50 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 1003.430588][ T26] audit: type=1804 audit(1667996270.283:1373): pid=22946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1184/file1/bus" dev="loop4" ino=1048981 res=1 errno=0 12:17:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000380)}, 0x0) [ 1003.496666][ T26] audit: type=1804 audit(1667996270.323:1374): pid=22946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1184/file1/bus" dev="loop4" ino=1048981 res=1 errno=0 12:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x68, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:17:50 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 1003.620578][T22967] serio: Serial port pts0 [ 1003.765512][T22978] loop4: detected capacity change from 0 to 87 [ 1003.802659][ T26] audit: type=1804 audit(1667996270.653:1375): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1185/file1/bus" dev="loop4" ino=1048982 res=1 errno=0 [ 1003.908442][ T26] audit: type=1804 audit(1667996270.693:1376): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1185/file1/bus" dev="loop4" ino=1048982 res=1 errno=0 12:18:02 executing program 1: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="f1ca3da47609c3f489074131c2f2f17d19f122a617ae4d16c619492d7e3a5a7aef522c8ab909a3f2d52e824aec36fa97d3198c173821db8ff1436c0d52494ac2e0787506a97848e06837a98012e964a3b1c15a") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:18:02 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 12:18:02 executing program 3: open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 12:18:02 executing program 2: syz_clone3(&(0x7f0000000400)={0x160141000, &(0x7f0000000180), &(0x7f00000001c0), 0x0, {0x11}, &(0x7f0000000240)=""/248, 0xf8, &(0x7f0000000340)=""/122, 0x0}, 0x58) getuid() 12:18:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 12:18:02 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x6c, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x48) [ 1015.869106][T22993] loop4: detected capacity change from 0 to 87 12:18:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000ff9000/0x4000)=nil}) [ 1015.940075][ T26] audit: type=1804 audit(1667996282.793:1377): pid=22993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1186/file1/bus" dev="loop4" ino=1048983 res=1 errno=0 12:18:02 executing program 3: r0 = socket$inet(0x2, 0x803, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891c, &(0x7f0000000140)={'batadv_slave_1\x00'}) 12:18:02 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x74, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r7, r8, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd, 0x7, 0x0, 0x0, 0x5}, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="824f3c805072605cb53e45d2aa6f404ff6e477d3ef705ee10000007cf00013a371d58c76c61afe7563e931d80534bcfab3d1f9f6e81b7e49111e95294007c111d8170b505cec79844aa1e8359cba85ea749ef33945e1c938afb69963718c8e16e1867e45b083385c7f20e372657a58d50c5fa1a422543d03ab74a496382881d1423a9e711911af172a3fbbad15acbc6be97049e3a56d84c696b98ca4fa8aa3a635401e7dce6337bb8ee66aa59b1fcecb9fd8c3eedf2d8d470d22352c4b309e49f2412e15d7dcf088038301783f3673d944fd17dff278eef8460c04e664ffe3194a656fd85752000043be85c362be00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="89002c2f8ed5d626b27c2d1acb345c7a9f484024451601019f26f37c0bb3ba68a12829b58c75a1530414f9809ed6075229f4ae3bad6664b7b89f9f7e7dbb9814713519fbfe95ffbb7c112bbf5b955fd73f203a49ad2bca4eeb6c2842718d0e97788de7446c5f3a6dd4992bc98e7a6292e3014d3b2649ad0eff6d46f5a7e1804a2efc0aff23b23cdfac6d228885d05c6a1f"]) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, r6, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8001, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff], 0x9, 0x0, 0x1, {0x0, r14}}, 0x39) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:02 executing program 3: bpf$OBJ_GET_PROG(0x2, &(0x7f0000000040)={&(0x7f0000000080)='./file0/file0\x00'}, 0x5d) [ 1016.084694][T23009] serio: Serial port pts0 [ 1016.093066][ T26] audit: type=1804 audit(1667996282.793:1378): pid=22993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1186/file1/bus" dev="loop4" ino=1048983 res=1 errno=0 [ 1016.172657][T23019] loop4: detected capacity change from 0 to 87 [ 1016.221140][T23001] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1016.272708][ T26] audit: type=1804 audit(1667996283.123:1379): pid=23019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1187/file1/bus" dev="loop4" ino=1048984 res=1 errno=0 [ 1016.312449][ T26] audit: type=1804 audit(1667996283.133:1380): pid=23019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1187/file1/bus" dev="loop4" ino=1048984 res=1 errno=0 12:18:06 executing program 3: r0 = socket$inet(0x2, 0x803, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000140)={'batadv_slave_1\x00'}) 12:18:06 executing program 1: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="f1ca3da47609c3f489074131c2f2f17d19f122a617ae4d16c619492d7e3a5a7aef522c8ab909a3f2d52e824aec36fa97d3198c173821db8ff1436c0d52494ac2e0787506a97848e06837a98012e964a3b1c15a") (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:18:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) dup3(r3, r4, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$KDENABIO(r5, 0x4b36) read(r3, 0x0, 0x2006) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r6 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x14) 12:18:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd, 0x7, 0x0, 0x0, 0x5}, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="824f3c805072605cb53e45d2aa6f404ff6e477d3ef705ee10000007cf00013a371d58c76c61afe7563e931d80534bcfab3d1f9f6e81b7e49111e95294007c111d8170b505cec79844aa1e8359cba85ea749ef33945e1c938afb69963718c8e16e1867e45b083385c7f20e372657a58d50c5fa1a422543d03ab74a496382881d1423a9e711911af172a3fbbad15acbc6be97049e3a56d84c696b98ca4fa8aa3a635401e7dce6337bb8ee66aa59b1fcecb9fd8c3eedf2d8d470d22352c4b309e49f2412e15d7dcf088038301783f3673d944fd17dff278eef8460c04e664ffe3194a656fd85752000043be85c362be00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="89002c2f8ed5d626b27c2d1acb345c7a9f484024451601019f26f37c0bb3ba68a12829b58c75a1530414f9809ed6075229f4ae3bad6664b7b89f9f7e7dbb9814713519fbfe95ffbb7c112bbf5b955fd73f203a49ad2bca4eeb6c2842718d0e97788de7446c5f3a6dd4992bc98e7a6292e3014d3b2649ad0eff6d46f5a7e1804a2efc0aff23b23cdfac6d228885d05c6a1f"]) (async) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, r6, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) (async) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8001, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff], 0x9, 0x0, 0x1, {0x0, r14}}, 0x39) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:06 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x7a, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:06 executing program 2: r0 = socket$inet(0x2, 0x803, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00'}) 12:18:06 executing program 2: r0 = socket$inet(0x2, 0x803, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000140)={'batadv_slave_1\x00'}) 12:18:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r7, r8, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd, 0x7, 0x0, 0x0, 0x5}, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="824f3c805072605cb53e45d2aa6f404ff6e477d3ef705ee10000007cf00013a371d58c76c61afe7563e931d80534bcfab3d1f9f6e81b7e49111e95294007c111d8170b505cec79844aa1e8359cba85ea749ef33945e1c938afb69963718c8e16e1867e45b083385c7f20e372657a58d50c5fa1a422543d03ab74a496382881d1423a9e711911af172a3fbbad15acbc6be97049e3a56d84c696b98ca4fa8aa3a635401e7dce6337bb8ee66aa59b1fcecb9fd8c3eedf2d8d470d22352c4b309e49f2412e15d7dcf088038301783f3673d944fd17dff278eef8460c04e664ffe3194a656fd85752000043be85c362be00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="89002c2f8ed5d626b27c2d1acb345c7a9f484024451601019f26f37c0bb3ba68a12829b58c75a1530414f9809ed6075229f4ae3bad6664b7b89f9f7e7dbb9814713519fbfe95ffbb7c112bbf5b955fd73f203a49ad2bca4eeb6c2842718d0e97788de7446c5f3a6dd4992bc98e7a6292e3014d3b2649ad0eff6d46f5a7e1804a2efc0aff23b23cdfac6d228885d05c6a1f"]) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, r6, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8001, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff], 0x9, 0x0, 0x1, {0x0, r14}}, 0x39) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CAPI_REGISTER(r9, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CAPI_REGISTER(r12, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd, 0x7, 0x0, 0x0, 0x5}, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="824f3c805072605cb53e45d2aa6f404ff6e477d3ef705ee10000007cf00013a371d58c76c61afe7563e931d80534bcfab3d1f9f6e81b7e49111e95294007c111d8170b505cec79844aa1e8359cba85ea749ef33945e1c938afb69963718c8e16e1867e45b083385c7f20e372657a58d50c5fa1a422543d03ab74a496382881d1423a9e711911af172a3fbbad15acbc6be97049e3a56d84c696b98ca4fa8aa3a635401e7dce6337bb8ee66aa59b1fcecb9fd8c3eedf2d8d470d22352c4b309e49f2412e15d7dcf088038301783f3673d944fd17dff278eef8460c04e664ffe3194a656fd85752000043be85c362be00000000000000", @ANYRES32, @ANYBLOB="89002c2f8ed5d626b27c2d1acb345c7a9f484024451601019f26f37c0bb3ba68a12829b58c75a1530414f9809ed6075229f4ae3bad6664b7b89f9f7e7dbb9814713519fbfe95ffbb7c112bbf5b955fd73f203a49ad2bca4eeb6c2842718d0e97788de7446c5f3a6dd4992bc98e7a6292e3014d3b2649ad0eff6d46f5a7e1804a2efc0aff23b23cdfac6d228885d05c6a1f"]) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, r11, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r13, &(0x7f0000000240)={0x2000000e}, r6, 0x3, 0x0, 0x1, {0x0, r14}}, 0xffffffff) (async) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8001, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff], 0x9, 0x0, 0x1, {0x0, r14}}, 0x39) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:18:07 executing program 3: bpf$BPF_PROG_ATTACH(0x14, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x28}, 0x14) [ 1020.094901][T23034] loop4: detected capacity change from 0 to 87 12:18:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r3 = syz_open_pts(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) dup3(r3, r4, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$KDENABIO(r5, 0x4b36) read(r3, 0x0, 0x2006) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r6 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x14) [ 1020.189276][ T26] audit: type=1804 audit(1667996287.043:1381): pid=23034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1188/file1/bus" dev="loop4" ino=1048985 res=1 errno=0 12:18:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x1}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 12:18:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x0, 0x0, 0xacd}, 0x48) 12:18:07 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x300, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1020.287898][ T26] audit: type=1804 audit(1667996287.073:1382): pid=23034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1188/file1/bus" dev="loop4" ino=1048985 res=1 errno=0 [ 1020.448003][T23067] loop4: detected capacity change from 0 to 87 [ 1020.450444][T23039] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1020.499063][ T26] audit: type=1804 audit(1667996287.353:1383): pid=23067 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1189/file1/bus" dev="loop4" ino=1048986 res=1 errno=0 [ 1020.527296][ T26] audit: type=1804 audit(1667996287.353:1384): pid=23067 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1189/file1/bus" dev="loop4" ino=1048986 res=1 errno=0 12:18:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2}, 0x48) 12:18:15 executing program 1: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="f1ca3da47609c3f489074131c2f2f17d19f122a617ae4d16c619492d7e3a5a7aef522c8ab909a3f2d52e824aec36fa97d3198c173821db8ff1436c0d52494ac2e0787506a97848e06837a98012e964a3b1c15a") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="f1ca3da47609c3f489074131c2f2f17d19f122a617ae4d16c619492d7e3a5a7aef522c8ab909a3f2d52e824aec36fa97d3198c173821db8ff1436c0d52494ac2e0787506a97848e06837a98012e964a3b1c15a") (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) (async) 12:18:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) r3 = syz_open_pts(r2, 0x0) (async) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) dup3(r3, r4, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$KDENABIO(r5, 0x4b36) (async) read(r3, 0x0, 0x2006) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r6 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x14) 12:18:15 executing program 3: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) 12:18:15 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x500, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000300)=""/4096) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="186a00000e000000000000000300000018ed2afa000000050000000000eb00630010005931683eddfb8526f89f8c32b6be023f7e3ef6c0987832b0492c9a8c0e1a116e21c8122734ac9dd27c3f853a81b1a9dd3ac4a7d403202285bfe0c6fa078632e874b68785db25885e5367bc2ca09f903e801e40dcba53403ae4536e86872f54d382c1edd149b95c8cdbd5f62bc01fe21fd89a9ba3c8766670bfd33f113c47ce2c525d03ce40dc16822f8fd74d69f7ff9137ed254389def1e192acdb27accf24ea4cdf771b824c100985a6d0730b75a2c837f7891b51cc9d2504093cba33c20d1a06de312fd54f27c24641e0d7d28fdd78d61a53bc592651c77b8254db9eb69b621c6cf85c4c0bc628137db8e1ebf90acbf6add5aa3f1976bb8ac60d77c3395548a3b805a22e833ce07fa5aa983be78069033851cbc54124a4be6f179e8bac72fca4acff2c9de5f62d6472250313f8bc70593d0c343568b2a9fec3fd0c"], &(0x7f0000000080)='syzkaller\x00', 0x3fffc000, 0xf5, &(0x7f00000000c0)=""/245, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xe, 0x1f, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r0, r0]}, 0x80) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)={&(0x7f0000001d00)='./file0/file0\x00', 0x0, 0x8}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x0, &(0x7f0000002100), &(0x7f0000000500)='syzkaller\x00', 0x0, 0x65, &(0x7f0000002180)=""/101, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002580)={0x2, 0x4, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r1, r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x12, 0x5, 0x8, 0x1b}, 0x27) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x3, 0x2, 0x50, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0xce, &(0x7f0000000300)=""/206, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0xac9, 0x614}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001940), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x0, 0x5, 0x8, 0x1f, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0xf, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x5, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[0xffffffffffffffff, 0xffffffffffffffff, r5]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)={&(0x7f0000001c40)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x1, &(0x7f0000001ac0)=ANY=[@ANYBLOB="4d0a500000000088"], &(0x7f0000001b00)='syzkaller\x00', 0x8001, 0x6e, &(0x7f0000001740)=""/110, 0x41100, 0x0, '\x00', 0x0, 0xd, r4, 0x8, &(0x7f0000001bc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001c00)={0x0, 0xd, 0x65d7, 0x100}, 0x72, 0x0, r3, 0x0, &(0x7f0000001d80)}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x7, 0x401, 0x3f, 0x310, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x2}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)={&(0x7f0000001d00)='./file0/file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x8, &(0x7f0000002100)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x3, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xb, 0x8, 0xa, 0x120, 0xfffffffffffffff0}], &(0x7f0000002140)='GPL\x00', 0x0, 0x65, &(0x7f0000002180)=""/101, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002580)={0x2, 0x4, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[0xffffffffffffffff, r8, 0xffffffffffffffff]}, 0x80) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)={&(0x7f0000001d00)='./file0/file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x8, &(0x7f0000002100)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x3, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xb, 0x8, 0xa, 0x120, 0xfffffffffffffff0}], &(0x7f0000002140)='GPL\x00', 0x0, 0x65, &(0x7f0000002180)=""/101, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002580)={0x2, 0x4, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[0xffffffffffffffff, r9, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ae}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xa, &(0x7f00000004c0)=""/10, 0x41100, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000005c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x3, 0x5, 0xffffff01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r6, r7, r8, r9]}, 0x80) 12:18:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000300)=""/4096) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) [ 1028.439173][T23085] loop4: detected capacity change from 0 to 87 12:18:15 executing program 3: openat$rtc(0xffffffffffffff9c, 0x0, 0x5b5180, 0x0) [ 1028.490224][ T26] audit: type=1804 audit(1667996295.343:1385): pid=23085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1190/file1/bus" dev="loop4" ino=1048987 res=1 errno=0 12:18:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000300)=""/4096) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000300)=""/4096) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1028.553951][T23091] serio: Serial port pts0 12:18:15 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x600, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TESTDATA={0xb9, 0x45, "bef1b7af9958718162d37e94a0ad372aef0e1e85e73fe813aa6fcf2f82cd84af6640cf39dcd2483800407ec6d5e7cdd20f3b29feae7ed82457c2103c97dc2596711a16847fd3a629539b0c4f95262b6f5401c781d4b4403fddaf9e2c068605326b4af749add6d8e5840e32414d601525221c18e0a89415e95932d26605ccce3ae1b775a9d22a3b3dfd69639fd1ce40dfc2e742a29820061051426e6f9c9f5166adb3ab9e86a8590cb2eb82860a929943ff730cd13c"}, @NL80211_ATTR_TESTDATA={0xad, 0x45, "089a715680bec18f3f84880c46e0a922ee7749556c3cf501a750fcff79ab87e7b4fc05f6d155e76c663fe685ad5fc163143aa419fc74f2f3f416605025a871c681e3dfb7ffb5c5a9ac4779423dae5e583185720da7a80609fb016739515aa0acb77daf78bb5d68722df89a5c9d316f189067e072fd660b6c7dd6d24a1e619c3ac4171f8c6271b0380534ad6848050620d2e610d98653a27a2ccc6d1572da837653440fe1d9bcea4a36"}, @NL80211_ATTR_TESTDATA={0xd29, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0xec4}}, 0x0) [ 1028.610715][ T26] audit: type=1804 audit(1667996295.343:1386): pid=23085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1190/file1/bus" dev="loop4" ino=1048987 res=1 errno=0 [ 1028.740280][T23110] loop4: detected capacity change from 0 to 87 [ 1028.812598][ T26] audit: type=1804 audit(1667996295.663:1387): pid=23110 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1191/file1/bus" dev="loop4" ino=1048988 res=1 errno=0 [ 1028.916982][ T26] audit: type=1804 audit(1667996295.703:1388): pid=23110 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1191/file1/bus" dev="loop4" ino=1048988 res=1 errno=0 12:18:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:18:23 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x27cb80) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_setup(0x4a78, &(0x7f0000000040)={0x0, 0x8472, 0x4, 0x2, 0x18}, &(0x7f00000f6000/0x1000)=nil, &(0x7f00000f5000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0xb0867b6d1cb81ce4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x0, 0x0) 12:18:23 executing program 3: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x9]}, 0x8}) 12:18:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) 12:18:23 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x700, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:23 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000200)={0x0, 0x41, "c191f7f661061e1e23955499391fd48d664da5c77acebcc6a55e5c3ccd0b02a3b09d01e393588197e381ce0eb08a68731693a2ffdb446cfef44a11969372697f85"}) 12:18:23 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x82, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x400000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000014c0), 0x8c600, 0x0) pipe2$watch_queue(0x0, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12:18:23 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x27cb80) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_setup(0x4a78, &(0x7f0000000040)={0x0, 0x8472, 0x4, 0x2, 0x18}, &(0x7f00000f6000/0x1000)=nil, &(0x7f00000f5000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0xb0867b6d1cb81ce4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x27cb80) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x4a78, &(0x7f0000000040)={0x0, 0x8472, 0x4, 0x2, 0x18}, &(0x7f00000f6000/0x1000)=nil, &(0x7f00000f5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async) syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0xb0867b6d1cb81ce4}, 0x7f) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1036.746828][T23128] loop4: detected capacity change from 0 to 87 [ 1036.763628][T23129] serio: Serial port pts0 [ 1036.835965][ T26] audit: type=1804 audit(1667996303.683:1389): pid=23128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1192/file1/bus" dev="loop4" ino=1048989 res=1 errno=0 12:18:23 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0xfd, &(0x7f0000000100)=""/253, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1036.892453][ T26] audit: type=1804 audit(1667996303.683:1390): pid=23128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1192/file1/bus" dev="loop4" ino=1048989 res=1 errno=0 12:18:23 executing program 3: bpf$MAP_UPDATE_BATCH(0x22, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0}, 0x38) 12:18:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) [ 1036.928774][ T26] audit: type=1400 audit(1667996303.723:1391): avc: denied { append } for pid=23133 comm="syz-executor.2" name="pfkey" dev="proc" ino=4026532968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1037.055933][T23154] serio: Serial port pts0 12:18:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:18:29 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x70a, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:29 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x27cb80) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) syz_io_uring_setup(0x4a78, &(0x7f0000000040)={0x0, 0x8472, 0x4, 0x2, 0x18}, &(0x7f00000f6000/0x1000)=nil, &(0x7f00000f5000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) (async) syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0xb0867b6d1cb81ce4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xe4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)}, 0x20) 12:18:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 12:18:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) 12:18:29 executing program 3: bpf$MAP_UPDATE_BATCH(0x9, 0x0, 0x0) [ 1042.970696][T23165] loop4: detected capacity change from 0 to 87 [ 1043.007269][T23169] serio: Serial port pts0 12:18:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x6, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20) 12:18:29 executing program 0: r0 = syz_io_uring_setup(0x5d4a, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x8000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 1043.037164][ T26] audit: type=1804 audit(1667996309.883:1392): pid=23165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1193/file1/bus" dev="loop4" ino=1048990 res=1 errno=0 12:18:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0xffffffffffffffff) 12:18:30 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x900, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:30 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28b81, 0x0) [ 1043.161654][ T26] audit: type=1804 audit(1667996309.883:1393): pid=23165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1193/file1/bus" dev="loop4" ino=1048990 res=1 errno=0 [ 1043.261704][ T26] audit: type=1400 audit(1667996310.053:1394): avc: denied { create } for pid=23166 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1043.290239][ T26] audit: type=1400 audit(1667996310.053:1395): avc: denied { setattr } for pid=23166 comm="syz-executor.5" name="ROSE" dev="sockfs" ino=92537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1043.331169][T23191] loop4: detected capacity change from 0 to 87 [ 1043.372220][ T26] audit: type=1804 audit(1667996310.223:1396): pid=23191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1194/file1/bus" dev="loop4" ino=1048991 res=1 errno=0 [ 1043.411506][ T26] audit: type=1804 audit(1667996310.223:1397): pid=23191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1194/file1/bus" dev="loop4" ino=1048991 res=1 errno=0 12:18:36 executing program 0: r0 = syz_io_uring_setup(0x5d4a, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x8000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d4a, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x8000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:18:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:18:36 executing program 2: syz_clone(0x4008f000, 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 12:18:36 executing program 3: syz_clone(0x20001880, 0x0, 0x0, 0x0, 0x0, 0x0) 12:18:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) (async) 12:18:36 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xa00, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xae440, 0x0) [ 1049.236552][T23202] loop4: detected capacity change from 0 to 87 [ 1049.260962][T23205] serio: Serial port pts0 12:18:36 executing program 0: r0 = syz_io_uring_setup(0x5d4a, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x8000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d4a, &(0x7f0000000140)={0x0, 0xffffffff, 0x1, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x8000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1049.304041][ T26] audit: type=1804 audit(1667996316.153:1398): pid=23202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1195/file1/bus" dev="loop4" ino=1048992 res=1 errno=0 12:18:36 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') 12:18:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) [ 1049.376668][ T26] audit: type=1804 audit(1667996316.153:1399): pid=23202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1195/file1/bus" dev="loop4" ino=1048992 res=1 errno=0 12:18:36 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xa07, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:36 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000000300)="ed41000000080000d3f4655fd3f4655fd3f4655f0000000000000400046c08e39c995f9939ee236b7f1036c06739074327dc47c410efc78b61cf0cb74640971fb7", 0x41, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) epoll_pwait(r3, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x3ff, &(0x7f0000000000), 0x8) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:36 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockname$inet(r1, 0x0, &(0x7f0000000200)) [ 1049.529392][T23228] serio: Serial port pts0 [ 1049.593732][T23232] loop4: detected capacity change from 0 to 87 [ 1049.721537][ T26] audit: type=1804 audit(1667996316.573:1400): pid=23238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1196/file1/bus" dev="sda1" ino=1161 res=1 errno=0 [ 1049.806549][ T26] audit: type=1804 audit(1667996316.633:1401): pid=23232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1196/file1/bus" dev="sda1" ino=1161 res=1 errno=0 [ 1054.139587][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.145935][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 12:18:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0xbbc1, 0x100000, 0x8, 0x8e}, &(0x7f0000000040)=0x14) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1, 0x800}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x83}, 0x8) 12:18:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), 0x90) 12:18:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x80, 0x7, 0x9e4}) tkill(r2, 0x14) 12:18:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb) 12:18:44 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000000300)="ed41000000080000d3f4655fd3f4655fd3f4655f0000000000000400046c08e39c995f9939ee236b7f1036c06739074327dc47c410efc78b61cf0cb74640971fb7", 0x41, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) epoll_pwait(r3, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x3ff, &(0x7f0000000000), 0x8) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:44 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xb1a, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f0000000100), 0x4) 12:18:44 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000000300)="ed41000000080000d3f4655fd3f4655fd3f4655f0000000000000400046c08e39c995f9939ee236b7f1036c06739074327dc47c410efc78b61cf0cb74640971fb7", 0x41, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) (rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) epoll_pwait(r3, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x3ff, &(0x7f0000000000), 0x8) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:18:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0xffffffbb, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000001580)=0x10) [ 1057.622834][T23248] loop4: detected capacity change from 0 to 87 [ 1057.657886][T23245] serio: Serial port pts0 12:18:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0xffffffbb, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [ 1057.711959][ T26] audit: type=1804 audit(1667996324.563:1402): pid=23248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1197/file1/bus" dev="loop4" ino=1048993 res=1 errno=0 12:18:44 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x8}}}}}}}]}}, 0x0) [ 1057.807744][ T26] audit: type=1804 audit(1667996324.593:1403): pid=23248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1197/file1/bus" dev="loop4" ino=1048993 res=1 errno=0 12:18:44 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xc00, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1057.968347][ T26] audit: type=1400 audit(1667996324.603:1404): avc: denied { setattr } for pid=23243 comm="syz-executor.5" name="ptmx" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1057.979197][T23272] loop4: detected capacity change from 0 to 87 [ 1058.066307][ T26] audit: type=1804 audit(1667996324.913:1405): pid=23272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1198/file1/bus" dev="loop4" ino=1048994 res=1 errno=0 [ 1058.117630][ T26] audit: type=1804 audit(1667996324.913:1406): pid=23272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1198/file1/bus" dev="loop4" ino=1048994 res=1 errno=0 [ 1058.198369][ T21] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1058.398290][ T21] usb 4-1: device descriptor read/64, error 18 [ 1058.668380][ T21] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1058.858318][ T21] usb 4-1: device descriptor read/64, error 18 [ 1058.978462][ T21] usb usb4-port1: attempt power cycle [ 1059.398381][ T21] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1059.498901][ T21] usb 4-1: Invalid ep0 maxpacket: 0 [ 1059.648312][ T21] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1059.748548][ T21] usb 4-1: Invalid ep0 maxpacket: 0 [ 1059.753886][ T21] usb usb4-port1: unable to enumerate USB device 12:18:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0xbbc1, 0x100000, 0x8, 0x8e}, &(0x7f0000000040)=0x14) (async, rerun: 64) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (rerun: 64) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1, 0x800}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x83}, 0x8) 12:18:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async, rerun: 32) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async, rerun: 32) r2 = gettid() (async) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x80, 0x7, 0x9e4}) (async) tkill(r2, 0x14) 12:18:50 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}}}]}}, 0x0) 12:18:50 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r2 = memfd_secret(0x0) io_uring_enter(r2, 0x1339, 0x7cc7, 0x0, 0x0, 0x2d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x3) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) 12:18:50 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xd00, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:50 executing program 3: getsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f00000000c0), 0x0) 12:18:50 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept(r0, 0x0, 0x0) [ 1064.019552][T23281] serio: Serial port pts0 [ 1064.021770][T23287] loop4: detected capacity change from 0 to 87 12:18:50 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 12:18:50 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) r2 = memfd_secret(0x0) io_uring_enter(r2, 0x1339, 0x7cc7, 0x0, 0x0, 0x2d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x3) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) 12:18:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x80, 0x7, 0x9e4}) (async) tkill(r2, 0x14) 12:18:51 executing program 3: chown(0x0, 0x0, 0x0) pipe2(&(0x7f00000009c0), 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1064.096298][ T26] audit: type=1804 audit(1667996330.943:1407): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1199/file1/bus" dev="loop4" ino=1048995 res=1 errno=0 12:18:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)) [ 1064.156980][ T26] audit: type=1804 audit(1667996331.003:1408): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1199/file1/bus" dev="loop4" ino=1048995 res=1 errno=0 [ 1064.227243][T23306] serio: Serial port pts0 [ 1064.283620][ T26] audit: type=1800 audit(1667996331.133:1409): pid=23308 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1185 res=0 errno=0 [ 1064.298387][ T13] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1064.374774][ T26] audit: type=1804 audit(1667996331.133:1410): pid=23308 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3595806449/syzkaller.kjdNjC/1334/file0" dev="sda1" ino=1185 res=1 errno=0 [ 1064.518372][ T13] usb 3-1: device descriptor read/64, error 18 [ 1064.808395][ T13] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1065.008321][ T13] usb 3-1: device descriptor read/64, error 18 [ 1065.129650][ T13] usb usb3-port1: attempt power cycle [ 1065.558336][ T13] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1065.648405][ T13] usb 3-1: Invalid ep0 maxpacket: 0 [ 1065.798314][ T13] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1065.892735][ T13] usb 3-1: Invalid ep0 maxpacket: 0 [ 1065.898074][ T13] usb usb3-port1: unable to enumerate USB device 12:18:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0xbbc1, 0x100000, 0x8, 0x8e}, &(0x7f0000000040)=0x14) (async, rerun: 32) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1, 0x800}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x83}, 0x8) 12:18:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r2 = memfd_secret(0x0) io_uring_enter(r2, 0x1339, 0x7cc7, 0x0, 0x0, 0x2d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x3) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) memfd_secret(0x0) (async) io_uring_enter(r2, 0x1339, 0x7cc7, 0x0, 0x0, 0x2d) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x3) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) (async) 12:18:59 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xf00, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:18:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, r1}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/216}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x39, 0x2, @thr={&(0x7f0000000380)="0f3ec2b5df46a275c22178f150855341afce7bb2fb25577447a90189f9f00d33d389c48ec31e860a84898bd8ed0e729e19d161fe42762514cfabb845887b347ff385e7cdfd921038c2e9f9743bcff5fd158a791af723bafac04cdb6f0254233380da31675eaad854920df9bffd61239e06", &(0x7f0000000400)="2614163f7f37e16d438b7f3683dcc89ac3534d25d78fff61580f255f3bafcb95b3e5cdd511f9a8cb1527abdbaa9df27beb95f3d8da87e7775d8c4fe1a71bbab179d27b224fd85fd0fa47ec7a747c1f7ce74ac1a7f44ece50fdb5bc30f9940c"}}, &(0x7f0000000480)) tkill(r3, 0x14) 12:18:59 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x2d0}, &(0x7f00000000c0)={0x77359400}) 12:18:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 12:18:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) [ 1072.333277][T23321] loop4: detected capacity change from 0 to 87 [ 1072.371705][T23325] serio: Serial port pts0 12:18:59 executing program 2: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) [ 1072.390733][ T26] audit: type=1804 audit(1667996339.243:1411): pid=23321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1200/file1/bus" dev="loop4" ino=1048996 res=1 errno=0 12:18:59 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x0, 0x4, 0x0) 12:18:59 executing program 3: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)) 12:18:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x12, 0x1, 0x2}, {{r4, r5/1000+10000}, 0x5, 0x1, 0x10001}, {{}, 0x38, 0x8, 0x5}, {{r6, r7/1000+60000}, 0x1f, 0x200, 0x9}], 0x60) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 1072.475180][ T26] audit: type=1804 audit(1667996339.243:1412): pid=23321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1200/file1/bus" dev="loop4" ino=1048996 res=1 errno=0 12:18:59 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x1100, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1072.627855][ T26] audit: type=1800 audit(1667996339.473:1413): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1170 res=0 errno=0 [ 1072.681088][ T26] audit: type=1804 audit(1667996339.513:1414): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3595806449/syzkaller.kjdNjC/1337/file0" dev="sda1" ino=1170 res=1 errno=0 [ 1072.713384][T23347] loop4: detected capacity change from 0 to 87 [ 1072.772787][ T26] audit: type=1804 audit(1667996339.623:1415): pid=23347 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1201/file1/bus" dev="loop4" ino=1048997 res=1 errno=0 [ 1072.813486][ T26] audit: type=1804 audit(1667996339.623:1416): pid=23347 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1201/file1/bus" dev="loop4" ino=1048997 res=1 errno=0 12:19:08 executing program 2: r0 = io_uring_setup(0x61c4, &(0x7f0000000000)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000080)=r1, 0x1) 12:19:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syzkaller1\x00', 0x2}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:19:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, r1}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/216}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x39, 0x2, @thr={&(0x7f0000000380)="0f3ec2b5df46a275c22178f150855341afce7bb2fb25577447a90189f9f00d33d389c48ec31e860a84898bd8ed0e729e19d161fe42762514cfabb845887b347ff385e7cdfd921038c2e9f9743bcff5fd158a791af723bafac04cdb6f0254233380da31675eaad854920df9bffd61239e06", &(0x7f0000000400)="2614163f7f37e16d438b7f3683dcc89ac3534d25d78fff61580f255f3bafcb95b3e5cdd511f9a8cb1527abdbaa9df27beb95f3d8da87e7775d8c4fe1a71bbab179d27b224fd85fd0fa47ec7a747c1f7ce74ac1a7f44ece50fdb5bc30f9940c"}}, &(0x7f0000000480)) tkill(r3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, r1}) (async) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/216}) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_create(0x6, &(0x7f0000000180)={0x0, 0x39, 0x2, @thr={&(0x7f0000000380)="0f3ec2b5df46a275c22178f150855341afce7bb2fb25577447a90189f9f00d33d389c48ec31e860a84898bd8ed0e729e19d161fe42762514cfabb845887b347ff385e7cdfd921038c2e9f9743bcff5fd158a791af723bafac04cdb6f0254233380da31675eaad854920df9bffd61239e06", &(0x7f0000000400)="2614163f7f37e16d438b7f3683dcc89ac3534d25d78fff61580f255f3bafcb95b3e5cdd511f9a8cb1527abdbaa9df27beb95f3d8da87e7775d8c4fe1a71bbab179d27b224fd85fd0fa47ec7a747c1f7ce74ac1a7f44ece50fdb5bc30f9940c"}}, &(0x7f0000000480)) (async) tkill(r3, 0x14) (async) 12:19:08 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{}, {0x2}]}) 12:19:08 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x1500, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x12, 0x1, 0x2}, {{r4, r5/1000+10000}, 0x5, 0x1, 0x10001}, {{}, 0x38, 0x8, 0x5}, {{r6, r7/1000+60000}, 0x1f, 0x200, 0x9}], 0x60) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 12:19:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, &(0x7f00000002c0)={'tunl0\x00', 0x0}) 12:19:08 executing program 3: socketpair(0x1, 0x0, 0x7, &(0x7f0000000000)) 12:19:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x12, 0x1, 0x2}, {{r4, r5/1000+10000}, 0x5, 0x1, 0x10001}, {{}, 0x38, 0x8, 0x5}, {{r6, r7/1000+60000}, 0x1f, 0x200, 0x9}], 0x60) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 1081.659702][T23360] loop4: detected capacity change from 0 to 87 [ 1081.691262][T23358] serio: Serial port pts0 12:19:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x2, 0x0, 'hmac(sha256-ce)\x00'}, 0x58) 12:19:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x30, 0x800}) [ 1081.745532][ T26] audit: type=1804 audit(1667996348.593:1417): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1202/file1/bus" dev="loop4" ino=1048998 res=1 errno=0 12:19:08 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x15d0, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:08 executing program 2: syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xca, 0x4d, 0x44, 0x8, 0xac8, 0x3420, 0xccf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x0, 0x0, [@generic={0x2}]}}, {}, {{0x9, 0x5, 0xc}}, {}]}}]}}]}}, 0x0) [ 1081.839189][ T26] audit: type=1804 audit(1667996348.593:1418): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1202/file1/bus" dev="loop4" ino=1048998 res=1 errno=0 [ 1081.933255][ T26] audit: type=1400 audit(1667996348.783:1419): avc: denied { ioctl } for pid=23382 comm="syz-executor.3" path="/dev/fb0" dev="devtmpfs" ino=627 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1081.969469][T23387] loop4: detected capacity change from 0 to 87 [ 1082.013039][ T26] audit: type=1804 audit(1667996348.863:1420): pid=23387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1203/file1/bus" dev="loop4" ino=1048999 res=1 errno=0 [ 1082.052772][ T26] audit: type=1804 audit(1667996348.863:1421): pid=23387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1203/file1/bus" dev="loop4" ino=1048999 res=1 errno=0 [ 1082.188376][ T3693] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1082.428313][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 1082.548561][ T3693] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1082.559263][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1082.568998][ T3693] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1082.738656][ T3693] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3420, bcdDevice=cc.f9 [ 1082.747750][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.756195][ T3693] usb 3-1: Product: syz [ 1082.760634][ T3693] usb 3-1: Manufacturer: syz [ 1082.765226][ T3693] usb 3-1: SerialNumber: syz [ 1082.774621][ T3693] usb 3-1: config 0 descriptor?? [ 1082.819981][ T3693] usb 3-1: Found UVC 0.00 device syz (0ac8:3420) [ 1082.826340][ T3693] usb 3-1: No valid video chain found. [ 1083.023849][ T3693] usb 3-1: USB disconnect, device number 27 12:19:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syzkaller1\x00', 0x2}, 0x18) (async, rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async, rerun: 32) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:19:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, r1}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/216}) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x39, 0x2, @thr={&(0x7f0000000380)="0f3ec2b5df46a275c22178f150855341afce7bb2fb25577447a90189f9f00d33d389c48ec31e860a84898bd8ed0e729e19d161fe42762514cfabb845887b347ff385e7cdfd921038c2e9f9743bcff5fd158a791af723bafac04cdb6f0254233380da31675eaad854920df9bffd61239e06", &(0x7f0000000400)="2614163f7f37e16d438b7f3683dcc89ac3534d25d78fff61580f255f3bafcb95b3e5cdd511f9a8cb1527abdbaa9df27beb95f3d8da87e7775d8c4fe1a71bbab179d27b224fd85fd0fa47ec7a747c1f7ce74ac1a7f44ece50fdb5bc30f9940c"}}, &(0x7f0000000480)) (async) tkill(r3, 0x14) 12:19:17 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) 12:19:17 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x57, 0x9, 0x2, {0x1, 0x6}, {0x7f, 0x4}, @cond=[{0x0, 0x80, 0x8, 0xfb5f, 0x40, 0x1f}, {0x2, 0x4, 0x81, 0x80, 0x200, 0x2}]}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x5, 0x5}, {{}, 0x2, 0x20, 0x9}, {{}, 0x2}, {{}, 0x0, 0xfff, 0x2a9}, {{}, 0x12, 0x0, 0x4}], 0x78) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) openat(r0, &(0x7f0000000300)='./cgroup\x00', 0x20000, 0x92) creat(&(0x7f0000000340)='./cgroup\x00', 0x10) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) 12:19:17 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x1600, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000480)={'b', ' *:* ', 'r\x00'}, 0x8) 12:19:17 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x5144) 12:19:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000480)={'b', ' *:* ', 'r\x00'}, 0x8) [ 1090.984569][T23403] serio: Serial port pts0 [ 1090.988735][T23408] loop4: detected capacity change from 0 to 87 12:19:17 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x57, 0x9, 0x2, {0x1, 0x6}, {0x7f, 0x4}, @cond=[{0x0, 0x80, 0x8, 0xfb5f, 0x40, 0x1f}, {0x2, 0x4, 0x81, 0x80, 0x200, 0x2}]}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x5, 0x5}, {{}, 0x2, 0x20, 0x9}, {{}, 0x2}, {{}, 0x0, 0xfff, 0x2a9}, {{}, 0x12, 0x0, 0x4}], 0x78) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) openat(r0, &(0x7f0000000300)='./cgroup\x00', 0x20000, 0x92) creat(&(0x7f0000000340)='./cgroup\x00', 0x10) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x57, 0x9, 0x2, {0x1, 0x6}, {0x7f, 0x4}, @cond=[{0x0, 0x80, 0x8, 0xfb5f, 0x40, 0x1f}, {0x2, 0x4, 0x81, 0x80, 0x200, 0x2}]}) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) (async) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x5, 0x5}, {{}, 0x2, 0x20, 0x9}, {{}, 0x2}, {{}, 0x0, 0xfff, 0x2a9}, {{}, 0x12, 0x0, 0x4}], 0x78) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) (async) openat(r0, &(0x7f0000000300)='./cgroup\x00', 0x20000, 0x92) (async) creat(&(0x7f0000000340)='./cgroup\x00', 0x10) (async) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:19:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) rt_sigqueueinfo(r4, 0x26, &(0x7f0000000280)={0x30, 0x8, 0x8000}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) timer_create(0x4, &(0x7f0000000080)={0x0, 0xd, 0x2, @tid=r3}, &(0x7f0000000100)) 12:19:17 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) dup2(r1, r0) [ 1091.036729][ T26] audit: type=1804 audit(1667996357.883:1422): pid=23408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1204/file1/bus" dev="loop4" ino=1049000 res=1 errno=0 12:19:18 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x1a0b, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1091.120598][ T26] audit: type=1804 audit(1667996357.883:1423): pid=23408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1204/file1/bus" dev="loop4" ino=1049000 res=1 errno=0 [ 1091.235973][T23419] serio: Serial port pts0 [ 1091.256640][T23425] loop4: detected capacity change from 0 to 87 [ 1091.267730][T23407] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1091.316838][ T26] audit: type=1804 audit(1667996358.163:1424): pid=23425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1205/file1/bus" dev="loop4" ino=1049001 res=1 errno=0 [ 1091.352186][ T26] audit: type=1804 audit(1667996358.163:1425): pid=23425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1205/file1/bus" dev="loop4" ino=1049001 res=1 errno=0 12:19:27 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 12:19:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000600)={'filter\x00', 0x4, "d54ac5fe"}, &(0x7f0000000700)=0x28) 12:19:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syzkaller1\x00', 0x2}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syzkaller1\x00', 0x2}, 0x18) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:19:27 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x57, 0x9, 0x2, {0x1, 0x6}, {0x7f, 0x4}, @cond=[{0x0, 0x80, 0x8, 0xfb5f, 0x40, 0x1f}, {0x2, 0x4, 0x81, 0x80, 0x200, 0x2}]}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x5, 0x5}, {{}, 0x2, 0x20, 0x9}, {{}, 0x2}, {{}, 0x0, 0xfff, 0x2a9}, {{}, 0x12, 0x0, 0x4}], 0x78) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) openat(r0, &(0x7f0000000300)='./cgroup\x00', 0x20000, 0x92) creat(&(0x7f0000000340)='./cgroup\x00', 0x10) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x57, 0x9, 0x2, {0x1, 0x6}, {0x7f, 0x4}, @cond=[{0x0, 0x80, 0x8, 0xfb5f, 0x40, 0x1f}, {0x2, 0x4, 0x81, 0x80, 0x200, 0x2}]}) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) (async) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x5, 0x5}, {{}, 0x2, 0x20, 0x9}, {{}, 0x2}, {{}, 0x0, 0xfff, 0x2a9}, {{}, 0x12, 0x0, 0x4}], 0x78) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000280)=0x1, 0x0, 0x4) (async) openat(r0, &(0x7f0000000300)='./cgroup\x00', 0x20000, 0x92) (async) creat(&(0x7f0000000340)='./cgroup\x00', 0x10) (async) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) 12:19:27 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x1f00, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) (async) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async, rerun: 64) read(r2, 0x0, 0x2006) (rerun: 64) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 32) rt_sigqueueinfo(r4, 0x26, &(0x7f0000000280)={0x30, 0x8, 0x8000}) (rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r3, 0x14) (async, rerun: 64) timer_create(0x4, &(0x7f0000000080)={0x0, 0xd, 0x2, @tid=r3}, &(0x7f0000000100)) (rerun: 64) 12:19:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc) 12:19:27 executing program 2: ppoll(&(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000340), 0x0, 0x0) [ 1100.296306][T23447] loop4: detected capacity change from 0 to 87 [ 1100.321690][T23450] serio: Serial port pts0 12:19:27 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0xa2) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0xe82f27d0f0379d4e, 0xd7, &(0x7f0000000300)="405d97d343be607c3efa83dbee7a6ada777a1f6f263525efd0e46a0a839d38a59b47d5541c437a86ee12c0abb68402fbf41ac442dbd53c598db42e35690dd4ff49dd77af341877b77dc55e085ececa6c8cd9eab4b6624130b3546a0b24caf6b9530d78cc62c4cc39ffcd15a5239d7b6565871e9e1d55dc8ac2ffc16e20f000dbcb4ac0866ee5143869eb252364c47c70fc706e80ec45a331b06e4c6edb4ee337e34b0a501653ca087760f283559cb0efe2766ead7c74249b9520f7e3f66b68598be1016c76e17459390c522a16df0cab7b691353192d53"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000040)=""/92) [ 1100.360546][ T26] audit: type=1804 audit(1667996367.213:1426): pid=23447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1206/file1/bus" dev="loop4" ino=1049002 res=1 errno=0 12:19:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) ioctl$TIOCSBRK(r0, 0x5427) (async, rerun: 64) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) (rerun: 64) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r3 = gettid() (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async) rt_sigqueueinfo(r4, 0x26, &(0x7f0000000280)={0x30, 0x8, 0x8000}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) (async) timer_create(0x4, &(0x7f0000000080)={0x0, 0xd, 0x2, @tid=r3}, &(0x7f0000000100)) 12:19:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x23, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:19:27 executing program 2: setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004f80)={{{@in6=@mcast2, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@private0}}, 0xe8) pipe(&(0x7f0000005140)) 12:19:27 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x2000, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1100.466330][ T26] audit: type=1804 audit(1667996367.213:1427): pid=23447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1206/file1/bus" dev="loop4" ino=1049002 res=1 errno=0 [ 1100.631691][T23476] loop4: detected capacity change from 0 to 87 [ 1100.667381][ T26] audit: type=1804 audit(1667996367.513:1428): pid=23476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1207/file1/bus" dev="loop4" ino=1049003 res=1 errno=0 [ 1100.725337][ T26] audit: type=1804 audit(1667996367.553:1429): pid=23476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1207/file1/bus" dev="loop4" ino=1049003 res=1 errno=0 12:19:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/41, 0x29}) r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x4, 0x218001) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2, 0x1, 0x7fff) sendfile(r0, r1, &(0x7f0000000480)=0x800, 0x401) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) io_cancel(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000680)="26d8938ef4b8834db284e6587b881fed1acc89c018d1b5616aed84fc37769f5d936cb22ccbd0f3baeb45c054789b1f07387c2c027779fdbb838234b8b672d8f351716c46d8567a62ebc5b0960e968f42ef27caef46ce25e645c9cfc35ea4e5749f8a5b45bde69adf53d45f932774080eca9510103a7c658519ae4741f0cb57fed9b99fb48b67950bfc89a37a7e40529d21ae96cf132adb9b68991efe7f", 0x9d, 0xe000000000000000, 0x0, 0x3, r4}, &(0x7f00000007c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:19:34 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0xa2) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async, rerun: 32) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0xe82f27d0f0379d4e, 0xd7, &(0x7f0000000300)="405d97d343be607c3efa83dbee7a6ada777a1f6f263525efd0e46a0a839d38a59b47d5541c437a86ee12c0abb68402fbf41ac442dbd53c598db42e35690dd4ff49dd77af341877b77dc55e085ececa6c8cd9eab4b6624130b3546a0b24caf6b9530d78cc62c4cc39ffcd15a5239d7b6565871e9e1d55dc8ac2ffc16e20f000dbcb4ac0866ee5143869eb252364c47c70fc706e80ec45a331b06e4c6edb4ee337e34b0a501653ca087760f283559cb0efe2766ead7c74249b9520f7e3f66b68598be1016c76e17459390c522a16df0cab7b691353192d53"}) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async, rerun: 32) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000040)=""/92) (rerun: 32) 12:19:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5412, 0x21000000) 12:19:34 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@remote, @empty, 0x0, "8b0a0581770e8adea5d155b51784033965dd452e7aac4a4fec3284a08772c483"}, 0x3c) 12:19:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x4) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000280)={0x80000001, 0x8, 0x3, 0x9, 0x18, "1869c1f2e53a5a4639ae408b7b42a7ae01a58c"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 12:19:34 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x3f00, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5412, 0x0) 12:19:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@dev, @empty, 0x0, "7e6b3b1ae09e21846ebf8d54c783fd7102dae8cb98138cac5c7240151ee863ae"}, 0x3c) ioctl$VT_ACTIVATE(r0, 0x5412, 0x20000000) [ 1107.514325][T23494] loop4: detected capacity change from 0 to 87 [ 1107.546192][T23490] serio: Serial port pts0 12:19:34 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0xa2) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0xe82f27d0f0379d4e, 0xd7, &(0x7f0000000300)="405d97d343be607c3efa83dbee7a6ada777a1f6f263525efd0e46a0a839d38a59b47d5541c437a86ee12c0abb68402fbf41ac442dbd53c598db42e35690dd4ff49dd77af341877b77dc55e085ececa6c8cd9eab4b6624130b3546a0b24caf6b9530d78cc62c4cc39ffcd15a5239d7b6565871e9e1d55dc8ac2ffc16e20f000dbcb4ac0866ee5143869eb252364c47c70fc706e80ec45a331b06e4c6edb4ee337e34b0a501653ca087760f283559cb0efe2766ead7c74249b9520f7e3f66b68598be1016c76e17459390c522a16df0cab7b691353192d53"}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000040)=""/92) [ 1107.585713][ T26] audit: type=1804 audit(1667996374.433:1430): pid=23494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1208/file1/bus" dev="loop4" ino=1049004 res=1 errno=0 12:19:34 executing program 3: r0 = socket(0xa, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x29, 0x4e, 0x0, 0x0) 12:19:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#]'}, {}, {}, {0x20, '%),{{'}], 0xa, "43d58e8a7ce925fde1bf2db99dfe4e9fadf17263137b3fb87a1ccf4ff4043bdbb0712394637d2f4c985806e41eb02b688b58f3b49361872c7613fa2bed5d2e68ff781b0fa7c4eef6de02baa21a31932b984fb72bd578a990f59075da899db95158f3b2ddd459f09021ec96c509db11432941a63cca6e8938b4151047a1de0572c4f3060b69703fbb8954d5859a2e8bac5445c83d4c8206629027cd181cc7d793359131e11d5e5261228a22896ca9ff107375eddfefaa9c8e2fc14b14fa37a1d3ba8d77e5bc9fc0c04d73afc142c1976f167e17971022e341cd3f13e98ffeec1a598a7d4452848ba303fa7452624d7f5b527930"}, 0x109) 12:19:34 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x4000, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1107.643377][ T26] audit: type=1804 audit(1667996374.453:1431): pid=23494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1208/file1/bus" dev="loop4" ino=1049004 res=1 errno=0 [ 1107.819529][T23514] loop4: detected capacity change from 0 to 87 [ 1107.862662][ T26] audit: type=1804 audit(1667996374.713:1432): pid=23514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1209/file1/bus" dev="loop4" ino=1049005 res=1 errno=0 [ 1107.901771][ T26] audit: type=1804 audit(1667996374.743:1433): pid=23514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1209/file1/bus" dev="loop4" ino=1049005 res=1 errno=0 12:19:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (rerun: 64) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/41, 0x29}) (async) r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x4, 0x218001) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2, 0x1, 0x7fff) sendfile(r0, r1, &(0x7f0000000480)=0x800, 0x401) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) io_cancel(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000680)="26d8938ef4b8834db284e6587b881fed1acc89c018d1b5616aed84fc37769f5d936cb22ccbd0f3baeb45c054789b1f07387c2c027779fdbb838234b8b672d8f351716c46d8567a62ebc5b0960e968f42ef27caef46ce25e645c9cfc35ea4e5749f8a5b45bde69adf53d45f932774080eca9510103a7c658519ae4741f0cb57fed9b99fb48b67950bfc89a37a7e40529d21ae96cf132adb9b68991efe7f", 0x9d, 0xe000000000000000, 0x0, 0x3, r4}, &(0x7f00000007c0)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077133644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x10c0, 0x805, 0x0, 0x6) 12:19:40 executing program 3: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 12:19:40 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x3, 0x80000001, 0x34, 0x2, 0xff, 0x800}) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x10000, [0x7, 0x100000001, 0x8, 0x0, 0x8, 0x5]}) 12:19:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x1) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 12:19:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x4) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000280)={0x80000001, 0x8, 0x3, 0x9, 0x18, "1869c1f2e53a5a4639ae408b7b42a7ae01a58c"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 12:19:40 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x4800, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1113.748506][ T26] audit: type=1400 audit(1667996380.603:1434): avc: denied { ioctl } for pid=23516 comm="syz-executor.1" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 12:19:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b45, 0x7) 12:19:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b3a, 0x0) 12:19:40 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x3, 0x80000001, 0x34, 0x2, 0xff, 0x800}) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x10000, [0x7, 0x100000001, 0x8, 0x0, 0x8, 0x5]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x3, 0x80000001, 0x34, 0x2, 0xff, 0x800}) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x10000, [0x7, 0x100000001, 0x8, 0x0, 0x8, 0x5]}) (async) [ 1113.820143][T23526] loop4: detected capacity change from 0 to 87 [ 1113.839388][T23528] serio: Serial port pts0 12:19:40 executing program 3: bpf$MAP_CREATE(0x15, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 12:19:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) r2 = gettid() (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x4) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000280)={0x80000001, 0x8, 0x3, 0x9, 0x18, "1869c1f2e53a5a4639ae408b7b42a7ae01a58c"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x14) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1113.897798][ T26] audit: type=1804 audit(1667996380.743:1435): pid=23526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1210/file1/bus" dev="loop4" ino=1049006 res=1 errno=0 12:19:40 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x3, 0x80000001, 0x34, 0x2, 0xff, 0x800}) (async, rerun: 32) r1 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x10000, [0x7, 0x100000001, 0x8, 0x0, 0x8, 0x5]}) [ 1114.000297][ T26] audit: type=1804 audit(1667996380.783:1436): pid=23526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1210/file1/bus" dev="loop4" ino=1049006 res=1 errno=0 [ 1114.075777][T23549] serio: Serial port pts0 [ 1115.586739][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.593102][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 12:19:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/41, 0x29}) r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x4, 0x218001) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2, 0x1, 0x7fff) sendfile(r0, r1, &(0x7f0000000480)=0x800, 0x401) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) io_cancel(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000680)="26d8938ef4b8834db284e6587b881fed1acc89c018d1b5616aed84fc37769f5d936cb22ccbd0f3baeb45c054789b1f07387c2c027779fdbb838234b8b672d8f351716c46d8567a62ebc5b0960e968f42ef27caef46ce25e645c9cfc35ea4e5749f8a5b45bde69adf53d45f932774080eca9510103a7c658519ae4741f0cb57fed9b99fb48b67950bfc89a37a7e40529d21ae96cf132adb9b68991efe7f", 0x9d, 0xe000000000000000, 0x0, 0x3, r4}, &(0x7f00000007c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/41, 0x29}) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x4, 0x218001) (async) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000340)=""/245, 0xf5}], 0x2, 0x1, 0x7fff) (async) sendfile(r0, r1, &(0x7f0000000480)=0x800, 0x401) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) (async) io_cancel(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000680)="26d8938ef4b8834db284e6587b881fed1acc89c018d1b5616aed84fc37769f5d936cb22ccbd0f3baeb45c054789b1f07387c2c027779fdbb838234b8b672d8f351716c46d8567a62ebc5b0960e968f42ef27caef46ce25e645c9cfc35ea4e5749f8a5b45bde69adf53d45f932774080eca9510103a7c658519ae4741f0cb57fed9b99fb48b67950bfc89a37a7e40529d21ae96cf132adb9b68991efe7f", 0x9d, 0xe000000000000000, 0x0, 0x3, r4}, &(0x7f00000007c0)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) (async) 12:19:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x1267, 0x0) 12:19:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20000011) 12:19:47 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x4c00, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:47 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x3, 0xfffffffffffffffd, 0x0}, 0x0) syz_io_uring_setup(0x1898, &(0x7f0000000040)={0x0, 0x7a2b, 0x4, 0x0, 0x23a}, &(0x7f00000f5000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r7, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r5, r6, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r10, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r8, r9, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r10, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r11, &(0x7f0000000240)={0x2000000e}, r4, 0x3, 0x0, 0x1, {0x0, r12}}, 0xffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x8, 0x0, 0xaedad5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x4ac7) 12:19:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x3a) 12:19:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x81, 0x2, 0x0, 0x1}, 0x48) [ 1121.107782][T23570] loop4: detected capacity change from 0 to 87 [ 1121.137223][T23573] serio: Serial port pts0 12:19:48 executing program 3: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'pids'}]}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) [ 1121.170528][ T26] audit: type=1804 audit(1667996388.023:1437): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1211/file1/bus" dev="loop4" ino=1049007 res=1 errno=0 12:19:48 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x3, 0xfffffffffffffffd, 0x0}, 0x0) syz_io_uring_setup(0x1898, &(0x7f0000000040)={0x0, 0x7a2b, 0x4, 0x0, 0x23a}, &(0x7f00000f5000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r7, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r5, r6, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r10, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r8, r9, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r10, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r11, &(0x7f0000000240)={0x2000000e}, r4, 0x3, 0x0, 0x1, {0x0, r12}}, 0xffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x8, 0x0, 0xaedad5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x4ac7) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x3, 0xfffffffffffffffd, 0x0}, 0x0) (async) syz_io_uring_setup(0x1898, &(0x7f0000000040)={0x0, 0x7a2b, 0x4, 0x0, 0x23a}, &(0x7f00000f5000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CAPI_REGISTER(r7, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$CAPI_REGISTER(r10, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r10, 0x0, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r9, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r11, &(0x7f0000000240)={0x2000000e}, r4, 0x3, 0x0, 0x1, {0x0, r12}}, 0xffffffff) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x8, 0x0, 0xaedad5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x4ac7) (async) 12:19:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x81, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) 12:19:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 12:19:48 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x5700, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 1121.258422][ T26] audit: type=1804 audit(1667996388.053:1438): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1211/file1/bus" dev="loop4" ino=1049007 res=1 errno=0 [ 1121.432056][T23611] loop4: detected capacity change from 0 to 87 [ 1121.467217][ T26] audit: type=1804 audit(1667996388.313:1439): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1212/file1/bus" dev="loop4" ino=1049008 res=1 errno=0 [ 1121.507991][ T26] audit: type=1804 audit(1667996388.313:1440): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1212/file1/bus" dev="loop4" ino=1049008 res=1 errno=0 12:19:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x3fa, 0x8, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:19:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) (async) gettid() (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) (async) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x3a) (async) 12:19:57 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)='\a', 0x1}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}], 0x20}, 0x40) 12:19:57 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x3, 0xfffffffffffffffd, 0x0}, 0x0) (async) syz_io_uring_setup(0x1898, &(0x7f0000000040)={0x0, 0x7a2b, 0x4, 0x0, 0x23a}, &(0x7f00000f5000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r7, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5a98, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r10, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8460}) syz_io_uring_submit(r8, r9, &(0x7f00000045c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r10, 0x0, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0}}, './file0\x00'}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r11, &(0x7f0000000240)={0x2000000e}, r4, 0x3, 0x0, 0x1, {0x0, r12}}, 0xffffffff) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x8, 0x0, 0xaedad5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x4ac7) 12:19:57 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x5800, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:19:57 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffc) 12:19:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x1600bd80, 0x0, 0x0) 12:19:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 12:19:57 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2da9, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f3000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7c5b, 0x40d2, 0x5, &(0x7f0000000040)={[0xffffffff]}, 0x8) [ 1130.466649][T23627] loop4: detected capacity change from 0 to 87 [ 1130.486911][T23622] serio: Serial port pts0 [ 1130.566231][ T26] audit: type=1804 audit(1667996397.413:1441): pid=23627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1213/file1/bus" dev="loop4" ino=1049009 res=1 errno=0 12:19:57 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0, 0x400) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2da9, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f3000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7c5b, 0x40d2, 0x5, &(0x7f0000000040)={[0xffffffff]}, 0x8) 12:19:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x2}, 0x10) 12:19:57 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x17, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1130.639538][ T26] audit: type=1804 audit(1667996397.453:1442): pid=23627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1213/file1/bus" dev="loop4" ino=1049009 res=1 errno=0 12:20:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x478) (async) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @timestamp, @sack_perm, @window, @mss, @window, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x3fa, 0x8, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="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", 0x10c0, 0x805, 0x0, 0x6) 12:20:06 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x6000, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:20:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x1) (async, rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) tkill(r2, 0x3a) 12:20:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000004500)={0x0, 0xadf, 0x0, 0x0, 0x0, "126d4a608abcb62d7f71e3eec52f5f0f412fa4"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000004540)={0x2020}, 0x2020) 12:20:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:20:06 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2da9, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f3000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7c5b, 0x40d2, 0x5, &(0x7f0000000040)={[0xffffffff]}, 0x8) fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0, 0x400) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x2da9, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f3000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x7c5b, 0x40d2, 0x5, &(0x7f0000000040)={[0xffffffff]}, 0x8) (async) 12:20:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:20:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3fb, 0x98000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x8) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f00000f5000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x1}, 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 1139.793371][T23660] serio: Serial port pts1 [ 1139.799247][T23663] loop4: detected capacity change from 0 to 87 [ 1139.860513][ T26] audit: type=1804 audit(1667996406.703:1443): pid=23663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1214/file1/bus" dev="loop4" ino=1049010 res=1 errno=0 12:20:06 executing program 4: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[], 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x6800, 0x0, r0, &(0x7f0000000000), 0x16000}]) 12:20:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6c2, 0x22000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{0x8, 0xf3}, 'port1\x00', 0x0, 0x10, 0x2, 0x10000, 0x9, 0x1, 0x80000001, 0x0, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r3 = gettid() r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r6, r7) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_open_pts(r1, 0x543) tkill(r3, 0x14) [ 1140.034846][ T26] audit: type=1804 audit(1667996406.713:1444): pid=23663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1753739741/syzkaller.5Hm92V/1214/file1/bus" dev="loop4" ino=1049010 res=1 errno=0 [ 1140.474323][T22452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:20:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x0) [ 1140.808041][T22452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.107227][T22452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.305458][T22452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.583308][T22452] device hsr_slave_0 left promiscuous mode [ 1142.613737][T22452] device hsr_slave_1 left promiscuous mode [ 1142.628814][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.636314][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.661761][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.678451][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.706123][T22452] device bridge_slave_1 left promiscuous mode [ 1142.714373][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.734624][T22452] device bridge_slave_0 left promiscuous mode [ 1142.753173][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.785410][T22452] device veth1_macvtap left promiscuous mode [ 1142.808579][T22452] device veth0_macvtap left promiscuous mode [ 1142.814745][T22452] device veth1_vlan left promiscuous mode [ 1142.828692][T22452] device veth0_vlan left promiscuous mode [ 1143.290087][T22452] team0 (unregistering): Port device team_slave_1 removed [ 1143.322496][T22452] team0 (unregistering): Port device team_slave_0 removed [ 1143.352390][T22452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.391941][T22452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.555085][T22452] bond0 (unregistering): Released all slaves [ 1144.159749][T23714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1144.176414][T23714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1144.185285][T23714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1144.195268][T23714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1144.238463][T23714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1144.248451][T23714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1144.256889][T23712] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1144.274161][ T26] audit: type=1400 audit(1667996411.123:1445): avc: denied { mounton } for pid=23712 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1144.302285][T23712] Failed to initialize the IGMP autojoin socket (err -2) [ 1144.600584][T23712] chnl_net:caif_netlink_parms(): no params data found [ 1145.105958][T23712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.114783][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1145.124402][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1145.132456][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1145.140315][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1145.148256][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1145.156582][T23732] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1145.248572][T23712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.306630][T23712] device bridge_slave_0 entered promiscuous mode [ 1145.343335][T23732] Failed to initialize the IGMP autojoin socket (err -2) [ 1145.358969][T23712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.381701][T23712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.417169][T23712] device bridge_slave_1 entered promiscuous mode [ 1145.428573][T23714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1145.437648][T23714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1145.447208][T23714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1145.464479][T23714] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1145.485660][T23714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1145.494257][T23734] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1145.549617][T23734] Failed to initialize the IGMP autojoin socket (err -2) [ 1145.720977][T23712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.768787][ T26] audit: type=1400 audit(1667996412.613:1446): avc: denied { relabelfrom } for pid=23732 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1145.816717][T23712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.825925][ T3647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1145.840224][ T3647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1145.848357][ T3647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1145.855671][ T26] audit: type=1400 audit(1667996412.623:1447): avc: denied { relabelto } for pid=23732 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1145.876562][ T3647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1145.886254][ T3647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1145.899852][T23737] Bluetooth: hci3: HCI_REQ-0x0c1a [ 1145.955145][T22599] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1146.029704][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1146.038987][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1146.070961][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1146.091718][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1146.099086][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1146.111123][T23741] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1146.298437][ T3647] Bluetooth: hci0: command 0x0409 tx timeout [ 1146.332089][T23712] team0: Port device team_slave_0 added [ 1146.414978][T23712] team0: Port device team_slave_1 added [ 1146.551039][T23737] Failed to initialize the IGMP autojoin socket (err -2) [ 1146.558850][T23741] Failed to initialize the IGMP autojoin socket (err -2) [ 1146.588447][T23712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.595705][T23712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.718220][T23712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.773321][T23712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.796683][T23712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.907785][T23712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.274123][T23712] device hsr_slave_0 entered promiscuous mode [ 1147.318800][T23712] device hsr_slave_1 entered promiscuous mode [ 1148.230055][T23714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1148.239860][T23714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1148.272899][T23714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1148.282633][T23714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1148.293141][T23714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1148.301679][T23767] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1148.378300][T23714] Bluetooth: hci0: command 0x041b tx timeout [ 1148.397483][T23767] Failed to initialize the IGMP autojoin socket (err -2) [ 1148.802525][T22452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.001608][T22452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.041149][T23712] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 1149.149240][T22452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.168784][T23712] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 1149.248984][T23712] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 1149.315180][T22452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.373913][T23712] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 1149.786360][T22452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.948504][T22452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.949114][ T3647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1149.971704][ T3647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1149.979741][ T3647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1149.989812][ T3647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1149.997647][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1150.005490][ T3647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1150.021451][T23770] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1150.119182][T22452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.170098][T23770] Failed to initialize the IGMP autojoin socket (err -2) [ 1150.296368][T22452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.458431][T23714] Bluetooth: hci0: command 0x040f tx timeout [ 1150.583509][T23712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.620229][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1150.638886][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1150.737660][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1150.756292][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1150.798874][T23673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.806007][T23673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.888940][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1150.910098][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1150.948880][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1150.957510][T23673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.964666][T23673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.065555][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1151.162552][T22452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.202601][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1151.267875][T23738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1151.293520][T23738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1151.347245][T22452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.458705][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1151.469300][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1151.515258][T23773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1151.592458][T22452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.636740][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1151.661739][T23673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1151.746550][T22452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.817002][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1151.839027][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1151.863386][T23712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1152.009541][ T3647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1152.026843][ T3647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1152.035364][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1152.047846][ T3647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1152.061343][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1152.068842][ T3647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1152.079619][T23778] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1152.153717][ T3647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.159395][T23778] Failed to initialize the IGMP autojoin socket (err -2) [ 1152.162917][T23783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1152.196067][T23783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.205639][T23783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.214036][T23783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1152.229091][T23783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1152.240131][T23783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.260370][T23783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1152.263018][ T3647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1152.269437][T23783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1152.275528][ T3647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1152.283432][T23780] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1152.309177][T23781] Bluetooth: hci3: HCI_REQ-0x0c1a [ 1152.378685][T23781] Failed to initialize the IGMP autojoin socket (err -2) [ 1152.391329][T23780] Failed to initialize the IGMP autojoin socket (err -2) [ 1152.449150][T22452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.538385][T23783] Bluetooth: hci0: command 0x0419 tx timeout [ 1152.578743][T22452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.765762][T22452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.048614][T22452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.115474][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1153.138843][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1153.219156][T23712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.355167][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.369075][T23783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1153.379363][T23783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1153.388068][T23783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1153.396450][T23783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1153.404609][T23783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1153.412550][T23783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.420639][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1153.428453][T23792] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1153.604239][T23792] Failed to initialize the IGMP autojoin socket (err -2) [ 1153.663725][T23790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1153.675112][T23790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1153.701500][T23712] device veth0_vlan entered promiscuous mode [ 1153.744764][T23754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1153.761729][T23754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1153.784013][T23712] device veth1_vlan entered promiscuous mode [ 1153.851884][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1154.028727][T23712] device veth0_macvtap entered promiscuous mode [ 1154.077300][T23795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1154.086925][T23795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.098450][T23712] device veth1_macvtap entered promiscuous mode [ 1154.148883][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1154.159535][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1154.287361][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.300998][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.311425][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.322581][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.332744][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.386126][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.396506][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.428198][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.456694][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.478350][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.509708][T23712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.529748][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1154.540079][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1154.568930][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.589704][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.608287][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.639171][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.658234][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.678370][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.698651][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.718244][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.738485][T23712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.768373][T23712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.854302][T23712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.075741][T23797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1155.091079][T23797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1155.117690][T23712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1155.167682][T23783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1155.192709][T23783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1155.203291][T23783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1155.211217][T23783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1155.219254][T23783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1155.230930][T23801] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1155.246822][T23712] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1155.397250][T23801] Failed to initialize the IGMP autojoin socket (err -2) [ 1155.411176][T23712] wireguard: wg0: Could not create IPv4 socket [ 1155.442810][T23712] wireguard: wg1: Could not create IPv4 socket [ 1155.502830][T23712] wireguard: wg2: Could not create IPv4 socket [ 1156.491694][T23785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1156.501966][T23785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1156.512384][T23785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1156.521719][T23785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1156.529624][T23785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1156.536970][T23785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1156.546557][T23815] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1156.587500][T23783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1156.596837][T23783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1156.605332][T23783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1156.617252][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1156.625015][ T3647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.634201][T23818] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1156.691011][T23818] Failed to initialize the IGMP autojoin socket (err -2) [ 1156.701624][T23815] Failed to initialize the IGMP autojoin socket (err -2) [ 1156.728987][T23785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1156.743354][T23785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1156.751803][T23785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1156.760121][T23785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1156.767453][T23785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.778544][T23821] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1156.945806][T23821] Failed to initialize the IGMP autojoin socket (err -2) [ 1157.265460][ T3647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1157.274805][ T3647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1157.297444][ T3647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1157.305558][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1157.316312][ T3647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1157.334344][T23827] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1157.402011][T23827] Failed to initialize the IGMP autojoin socket (err -2) [ 1158.618504][ T3647] Bluetooth: hci0: command 0x0409 tx timeout [ 1158.732175][T22452] device hsr_slave_0 left promiscuous mode [ 1158.739516][T22452] device hsr_slave_1 left promiscuous mode [ 1158.748590][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.756029][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.840502][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.847966][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.890744][T22452] device bridge_slave_1 left promiscuous mode [ 1158.897043][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.952202][T22452] device bridge_slave_0 left promiscuous mode [ 1158.968503][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.002046][T23785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.016613][T23785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.025227][T22452] device hsr_slave_0 left promiscuous mode [ 1159.032896][T23785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.047073][T23785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1159.054496][T22452] device hsr_slave_1 left promiscuous mode [ 1159.054655][T23785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1159.079112][T23849] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1159.098479][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.105921][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.190636][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.198090][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.267873][T22452] device bridge_slave_1 left promiscuous mode [ 1159.286097][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.333701][T22452] device bridge_slave_0 left promiscuous mode [ 1159.358447][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.405125][T22452] device hsr_slave_0 left promiscuous mode [ 1159.418857][T22452] device hsr_slave_1 left promiscuous mode [ 1159.454957][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.468319][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.506569][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.526707][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.549810][T22452] device bridge_slave_1 left promiscuous mode [ 1159.556054][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.594867][T22452] device bridge_slave_0 left promiscuous mode [ 1159.604157][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.646598][T22452] device hsr_slave_0 left promiscuous mode [ 1159.678363][T22452] device hsr_slave_1 left promiscuous mode [ 1159.710734][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.728399][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.760344][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.805305][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.840311][T22452] device bridge_slave_1 left promiscuous mode [ 1159.846573][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.886102][T22452] device bridge_slave_0 left promiscuous mode [ 1159.905137][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.985227][T22452] device veth1_macvtap left promiscuous mode [ 1160.006387][T22452] device veth0_macvtap left promiscuous mode [ 1160.017754][T22452] device veth1_vlan left promiscuous mode [ 1160.036814][T22452] device veth0_vlan left promiscuous mode [ 1160.065848][T22452] device veth1_macvtap left promiscuous mode [ 1160.079894][T22452] device veth0_macvtap left promiscuous mode [ 1160.086048][T22452] device veth1_vlan left promiscuous mode [ 1160.108361][T22452] device veth0_vlan left promiscuous mode [ 1160.129997][T23785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1160.139950][T23785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1160.147718][T22452] device veth1_macvtap left promiscuous mode [ 1160.158747][T23785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1160.162400][T22452] device veth0_macvtap left promiscuous mode [ 1160.172645][T23785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1160.176235][T22452] device veth1_vlan left promiscuous mode [ 1160.188762][T23785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.197208][T23860] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1160.232470][T22452] device veth0_vlan left promiscuous mode [ 1160.248096][T22452] device veth1_macvtap left promiscuous mode [ 1160.254370][T22452] device veth0_macvtap left promiscuous mode [ 1160.269225][T22452] device veth1_vlan left promiscuous mode [ 1160.275071][T22452] device veth0_vlan left promiscuous mode [ 1160.707949][T23785] Bluetooth: hci0: command 0x041b tx timeout [ 1161.070588][T22452] team0 (unregistering): Port device team_slave_1 removed [ 1161.094841][T22452] team0 (unregistering): Port device team_slave_0 removed [ 1161.102126][T23785] Bluetooth: hci1: command 0x0409 tx timeout [ 1161.160854][T22452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.237318][T22452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.460753][T22452] bond0 (unregistering): Released all slaves [ 1161.543717][ T3647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1161.571094][ T3647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1161.583265][ T3647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1161.584386][T23783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1161.602717][ T3647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1161.603583][T23783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1161.619802][ T3647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1161.626413][T23783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1161.632728][ T3647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1161.639833][T23783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1161.642174][T23864] Bluetooth: hci3: HCI_REQ-0x0c1a [ 1161.649425][T23783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1161.671503][T23783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1161.680439][T23866] Bluetooth: hci4: HCI_REQ-0x0c1a [ 1161.863601][T22452] team0 (unregistering): Port device team_slave_1 removed [ 1161.913508][T22452] team0 (unregistering): Port device team_slave_0 removed [ 1161.936079][T22452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.963871][T22452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.114743][T22452] bond0 (unregistering): Released all slaves [ 1162.219522][T23783] Bluetooth: hci2: command 0x0409 tx timeout [ 1162.384656][T22452] team0 (unregistering): Port device team_slave_1 removed [ 1162.400540][T22452] team0 (unregistering): Port device team_slave_0 removed [ 1162.416801][T22452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.434625][T22452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.540294][T22452] bond0 (unregistering): Released all slaves [ 1162.778523][T23783] Bluetooth: hci0: command 0x040f tx timeout [ 1162.842162][T22452] team0 (unregistering): Port device team_slave_1 removed [ 1162.866037][T22452] team0 (unregistering): Port device team_slave_0 removed [ 1162.893141][T22452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.909616][T22452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.995162][T22452] bond0 (unregistering): Released all slaves [ 1163.083888][T23849] Failed to initialize the IGMP autojoin socket (err -2) [ 1163.103690][T23864] Failed to initialize the IGMP autojoin socket (err -2) [ 1163.104057][T23866] Failed to initialize the IGMP autojoin socket (err -2) [ 1163.112429][T23860] Failed to initialize the IGMP autojoin socket (err -2) [ 1163.188284][T23783] Bluetooth: hci1: command 0x041b tx timeout [ 1163.308893][T23815] netdevsim netdevsim3 netdevsim4: renamed from eth5 [ 1163.331312][T23815] netdevsim netdevsim3 netdevsim5: renamed from eth6 [ 1163.386932][T23815] netdevsim netdevsim3 netdevsim6: renamed from eth7 [ 1163.469653][T23815] netdevsim netdevsim3 netdevsim7: renamed from eth8 [ 1163.659367][T23815] netdevsim netdevsim4 netdevsim8: renamed from eth9 [ 1163.789812][T23815] netdevsim netdevsim4 netdevsim9: renamed from eth10 [ 1163.923777][T23815] netdevsim netdevsim4 netdevsim10: renamed from eth11 [ 1164.004042][T23815] netdevsim netdevsim4 netdevsim11: renamed from eth12 [ 1164.070648][T23815] netdevsim netdevsim5 netdevsim16: renamed from eth13 [ 1164.144718][T23815] netdevsim netdevsim5 netdevsim17: renamed from eth14 [ 1164.224230][T23815] netdevsim netdevsim5 netdevsim18: renamed from eth15 [ 1164.288497][T23815] netdevsim netdevsim5 netdevsim19: renamed from eth16 [ 1164.866976][T23783] Bluetooth: hci0: command 0x0419 tx timeout [ 1165.133081][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.168205][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.205955][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.228890][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.270301][T23815] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1165.320248][T23815] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1165.357524][T23815] wireguard: wg0: Could not create IPv4 socket [ 1165.382550][T23815] wireguard: wg1: Could not create IPv4 socket [ 1165.402680][T23815] wireguard: wg2: Could not create IPv4 socket [ 1166.288600][T23783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1166.299083][T23783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1166.309528][T23783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1166.317184][T23783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1166.327326][T23783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.335892][T23899] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1166.365010][T23899] Failed to initialize the IGMP autojoin socket (err -2) [ 1166.665407][T23899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.817138][T23899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.971795][T23899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.242643][T23899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.671259][ T3647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1167.694856][ T3647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1167.703542][ T3647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1167.724679][ T3647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1167.732343][ T3647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1167.741269][ T3647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1167.751372][ T3647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1167.760579][ T3647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1167.778719][T23783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1167.791987][T23926] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1167.798956][T23783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1167.806539][T23783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1167.814669][T23783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1167.818825][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1167.830600][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1167.838585][T23927] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1167.844394][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1167.852279][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1167.859929][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1167.863603][T23935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1167.874411][T23928] Bluetooth: hci3: HCI_REQ-0x0c1a [ 1167.885411][T23935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1167.894499][T23935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1167.914024][T23936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1167.921778][T23936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1167.929461][T23936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1167.937862][T23932] Bluetooth: hci4: HCI_REQ-0x0c1a [ 1167.971154][T23932] Failed to initialize the IGMP autojoin socket (err -2) [ 1167.985581][T23927] Failed to initialize the IGMP autojoin socket (err -2) [ 1168.005387][T23926] Failed to initialize the IGMP autojoin socket (err -2) [ 1168.023500][T23928] Failed to initialize the IGMP autojoin socket (err -2) [ 1168.041525][T23899] netdevsim netdevsim2 netdevsim20: renamed from eth5 [ 1168.123968][T23899] netdevsim netdevsim2 netdevsim21: renamed from eth6 [ 1168.200284][T23899] netdevsim netdevsim2 netdevsim22: renamed from eth7 [ 1168.244743][T23899] netdevsim netdevsim2 netdevsim23: renamed from eth8 [ 1168.379591][T23936] Bluetooth: hci0: command 0x0409 tx timeout [ 1169.039940][T23899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.071457][T23899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.091988][T23899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.118528][T23899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.148645][T23899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1169.181764][T23899] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1169.220897][T23899] wireguard: wg0: Could not create IPv4 socket [ 1169.239590][T23899] wireguard: wg1: Could not create IPv4 socket [ 1169.260129][T23899] wireguard: wg2: Could not create IPv4 socket [ 1170.848079][ T3647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1170.856332][ T3647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1170.870182][ T3647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1170.877799][ T3647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1170.885494][ T3647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1170.894016][T24011] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1170.937125][T24011] Failed to initialize the IGMP autojoin socket (err -2) [ 1172.028642][ T3647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1172.039536][ T3647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1172.055292][T23935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1172.063231][T23935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1172.071227][T23935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1172.079445][ T3647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.089547][ T3647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.089911][T24040] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1172.103526][ T3647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1172.112754][ T3647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1172.122444][ T3647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1172.132704][T23936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.143600][T24042] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1172.186209][T23783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1172.199009][T23783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1172.207172][T23783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1172.211058][T24040] Failed to initialize the IGMP autojoin socket (err -2) [ 1172.219580][T24042] Failed to initialize the IGMP autojoin socket (err -2) [ 1172.230448][T23783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1172.238075][T23783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1172.246712][T23783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1172.255323][T24044] Bluetooth: hci3: HCI_REQ-0x0c1a [ 1172.369492][T24044] Failed to initialize the IGMP autojoin socket (err -2) [ 1172.942122][T23783] Bluetooth: hci0: command 0x0409 tx timeout [ 1174.345586][T23936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1174.355470][T23936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1174.363361][T23936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1174.371271][T23936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1174.378916][T23936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1174.397217][T23936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1174.411376][T24080] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1174.481499][T24080] Failed to initialize the IGMP autojoin socket (err -2) [ 1175.028417][T23936] Bluetooth: hci0: command 0x041b tx timeout [ 1175.517889][T23783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.534323][T23783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1175.551404][T23783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1175.570680][T23783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1175.582107][T23783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1175.590796][T23783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.599397][T24096] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1175.701061][T24096] Failed to initialize the IGMP autojoin socket (err -2) [ 1175.751232][T23783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1175.768345][T23783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1175.777491][T23783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1175.786974][T23783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1175.794541][T23783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1175.802065][T23783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.811911][T24100] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1175.933582][T24100] Failed to initialize the IGMP autojoin socket (err -2) [ 1176.642769][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.674967][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.709068][T23783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1176.720844][T23783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1176.729380][T23783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1176.737377][T23783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1176.741294][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.755500][T23783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1176.764262][T23783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1176.772939][T24117] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1176.788500][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.807011][T24011] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1176.825958][T24011] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1176.844502][T24011] wireguard: wg0: Could not create IPv4 socket [ 1176.853129][T24011] wireguard: wg1: Could not create IPv4 socket [ 1176.862988][T24011] wireguard: wg2: Could not create IPv4 socket [ 1176.889847][T24117] Failed to initialize the IGMP autojoin socket (err -2) [ 1177.024106][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.030566][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.912206][T23936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1177.922979][T23936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1177.931827][T23936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1177.941549][T23936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1177.952605][T23935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1177.964332][T23935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1177.972936][T24140] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1177.973385][T23935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1177.988800][T23935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1177.999093][T23783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1178.007529][T23783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1178.016864][T23783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1178.024237][T23783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1178.033881][T24142] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1178.067070][T24140] Failed to initialize the IGMP autojoin socket (err -2) [ 1178.074776][T24142] Failed to initialize the IGMP autojoin socket (err -2) [ 1178.858300][T23783] Bluetooth: hci1: command 0x0409 tx timeout [ 1179.234153][T23935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.239082][ T3647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1179.251727][T23935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.261112][ T3647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1179.269692][ T3647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1179.270316][T23935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.284641][ T3647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1179.292726][ T3647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.292741][T23935] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1179.307582][T23714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1179.315989][T24166] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1179.316080][T23714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1179.341482][T23714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1179.352078][T24165] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1179.373550][T24166] Failed to initialize the IGMP autojoin socket (err -2) [ 1179.415720][T24165] Failed to initialize the IGMP autojoin socket (err -2) [ 1180.938306][T23783] Bluetooth: hci1: command 0x041b tx timeout [ 1181.275386][T23714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1181.284618][T23714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1181.296215][T23714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1181.304974][T23714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1181.315865][T23714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1181.323265][T23714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1181.332105][T24207] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1181.395138][T24207] Failed to initialize the IGMP autojoin socket (err -2) [ 1182.249049][T23935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1182.259238][T23935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1182.267220][T23935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1182.275468][T23935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1182.283761][T23935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1182.300241][T23935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1182.317201][T24219] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1182.346859][T24219] Failed to initialize the IGMP autojoin socket (err -2) [ 1183.028432][T23935] Bluetooth: hci1: command 0x040f tx timeout [ 1183.570856][T23783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1183.608489][T23783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1183.618012][T23783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1183.625973][T23783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1183.634643][T23783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1183.651938][T24237] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1183.747380][T24237] Failed to initialize the IGMP autojoin socket (err -2) [ 1183.856499][T23714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1183.866005][T23714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1183.874878][T23783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1183.893182][T23783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1183.900677][T23783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1183.911305][T24240] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1184.028098][T24240] Failed to initialize the IGMP autojoin socket (err -2) [ 1184.506639][T24117] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 1184.572285][T24117] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 1184.652698][T24117] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 1184.716911][T24117] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 1185.038682][T23935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.049454][T23935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.057291][T23935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.065307][T23935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1185.072657][T23935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1185.082996][T24258] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1185.098561][T23783] Bluetooth: hci1: command 0x0419 tx timeout [ 1185.134479][T24258] Failed to initialize the IGMP autojoin socket (err -2) [ 1185.444511][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.472085][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.501974][T24117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.531022][T24117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.551300][T24117] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1185.592902][T24117] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1185.630475][T24117] wireguard: wg0: Could not create IPv4 socket [ 1185.649657][T24117] wireguard: wg1: Could not create IPv4 socket [ 1185.682599][T24117] wireguard: wg2: Could not create IPv4 socket [ 1186.267946][T23783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1186.276876][T23783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1186.286105][T23783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1186.293905][T23783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1186.301322][T23783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1186.314445][T24282] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1186.375050][T24282] Failed to initialize the IGMP autojoin socket (err -2) [ 1187.658759][T23714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1187.667321][T23714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1187.678622][T23714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1187.686722][T23936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1187.694981][T23714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1187.702474][T23936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1187.713393][ T3647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1187.721075][ T3647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1187.732923][T23714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1187.734159][ T3647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1187.749314][ T3647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1187.757585][ T3647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1187.767069][T23935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1187.767788][T24308] Bluetooth: hci2: HCI_REQ-0x0c1a [ 1187.775624][T23935] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1187.787391][T23935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1187.794580][T23714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1187.803658][T23714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1187.812258][T24307] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1187.812258][T24312] Bluetooth: hci3: HCI_REQ-0x0c1a [ 1187.865175][T24307] Failed to initialize the IGMP autojoin socket (err -2) [ 1187.896000][T24308] Failed to initialize the IGMP autojoin socket (err -2) [ 1187.934148][T24312] Failed to initialize the IGMP autojoin socket (err -2) [ 1188.184724][T24282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.240235][T24282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.273393][T24282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.303519][T24282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.337307][T24282] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1188.360126][T24282] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1188.379330][T24282] wireguard: wg0: Could not create IPv4 socket [ 1188.387720][T24282] wireguard: wg1: Could not create IPv4 socket [ 1188.394332][T23714] Bluetooth: hci0: command 0x0409 tx timeout [ 1188.410685][T24282] wireguard: wg2: Could not create IPv4 socket [ 1189.441272][T23935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1189.451386][T23935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1189.472757][T23935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1189.482230][T23935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1189.491486][T23935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1189.499698][T23935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1189.508024][T24346] Bluetooth: hci0: HCI_REQ-0x0c1a [ 1189.575411][T24346] Failed to initialize the IGMP autojoin socket (err -2) [ 1190.538709][T23714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1190.549136][T23714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1190.557761][T23714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1190.568339][T23714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1190.575897][T23714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1190.584498][T24373] Bluetooth: hci1: HCI_REQ-0x0c1a [ 1190.617775][T24373] Failed to initialize the IGMP autojoin socket (err -2) 2022/11/09 12:20:57 SYZFATAL: executor 3 failed 11 times: executor 3: exit status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 16: Device or resource busy) loop exited with status 67 [ 1191.578276][T23714] Bluetooth: hci0: command 0x0409 tx timeout [ 1193.658254][T23714] Bluetooth: hci0: command 0x041b tx timeout